Re: [apache-ssl] can't complete SSL connection...ideas?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [apache-ssl] can't complete SSL connection...ideas?



> I am a little unclear on the match|supplied|optional policy settings,
> however.  
 
This is more an SSLeay related topic which would belong to 
ssl-users@lists.cryptsoft.com (usual -request addr for subscribing)

In short:
match - the field in req MUST be the SAME as in CA cert
supplied - the field MUST contain some value
optional - the field MAY contain some value
[nothing] - the value of the field is discarded

The 1st and 2nd generate errors which abort the signing.

-- 
read you later  -  Holger Reif
------------------------------------ Signaturprojekt Deutsche Einheit
TU Ilmenau - Informatik - Telematik                (Verdamp lang her)
Reif@PrakInf.TU-Ilmenau.DE          Alt wie ein Baum werden, um ueber
Remus.PrakInf.TU-Ilmenau.DE/Reif/    alle 7 Bruecken gehen zu koennen