[Pki-users] Creation of a server certificate with an itermediary CA attribute

John Magne jmagne at redhat.com
Tue Jul 23 18:18:23 UTC 2013


You could go into the directory /var/lib/pki-ca/profiles/ca

Find the profile you want to clone, which is in a file XXXX.cfg

Copy that file to a new name that you want.

Put an entry for that new profile in the conf/CS.cfg file under the heading:
profiles.list


Then you could either manually edit this file if you know how to, or use the pkiconsole to add stuff to it.

In order for the console to be able to edit a profile, it must be marked as "disabled" in the agent web interface.

----- Original Message -----
From: "Michelle Taggart" <mdemansana at philasd.org>
To: pki-users at redhat.com
Sent: Tuesday, July 23, 2013 10:38:38 AM
Subject: [Pki-users] Creation of a server certificate with an itermediary CA	attribute

Hi,

I'm quite new at the concept, but is there a way to clone a server certificate profile and give it an intermediary CA attribute?  I'm trying to generate a cert that a proxy server uses to decrypt SSL traffic.  The CSR that the proxy creates requests for a server certificate with subCA ability, for issuing certificates.

Thanks, 

Michelle T


_______________________________________________
Pki-users mailing list
Pki-users at redhat.com
https://www.redhat.com/mailman/listinfo/pki-users




More information about the Pki-users mailing list