[sr-dev] org name in server/client certificate

Andrei Pelinescu-Onciul andrei at iptel.org
Thu Oct 7 11:32:46 CEST 2010


On Oct 01, 2010 at 19:11, Juha Heinanen <jh at tutpro.com> wrote:
> tls module README says:
> 
> Creating a server/client certificate
> ------------------------------------
> 1. create a certificate request (and its private key in privkey.pem)
> 	openssl req -out ser1_cert_req.pem -new -nodes
> 	WARNING: the organization name should be the same as in the ca
> 	certificate.
> 
> why the warning?  i followed the tuto and there they are not the same
> and still tls works.

I don't remember. I think that depending on how openssl is configured,
it might refuse to sign certification with a different organization name
then the CA.

Andrei



More information about the sr-dev mailing list