Re: [Ejbca-develop] Question with Certificate profile

[Tomas G. <to...@pr...>]

Hi,

How did you send your CSR, and are you sure you used the correct 
certificate profile? And are you sure the CSR did not have "null" 
subject DN? Null subject DN should be hard to get in EJBCA.
Did you register your end entity with no subject DN?
Did you register your end entity with the correct certificate profile?

It should be apparent from the debug logs what happens though, if you 
practice hard reading them ;-).

"Allow subject DN override" is used in production in several places so 
the function should work.

Cheers,
Tomas


On 03/15/2011 01:21 PM, Ike Ikonne wrote:
> Hi,
>
> I did that, but the signed certificate had "null" subject DN.
>
> Thanks,
>
> Ike
>
>
>
> From: David CARELLA <dca...@li...>
> To: ejb...@li...
> Date: 03/15/2011 05:12 AM
> Subject: Re: [Ejbca-develop] Question with Certificate profile
> ------------------------------------------------------------------------
>
>
>
> Hi,
>
> In certificate profile, you check “Allow subject DN override”. This
> force EJBCA to use only the Subject DN of the CSR.
>
> Regards,
> David
>
> On 03/14/2011 06:11 PM, Ike Ikonne wrote:
>  > Hi all,
>  >
>  > I sent this message earlier on and I have not received any comments;
>  > anyone has any comment regarding
>  > my question(s)?
>  >
>  > Thanks,
>  >
>  > Ike
>  >
>  >
>  >
>  >
>  > From: Ike Ikonne/Dallas/IBM@IBMUS
>  > To: ejb...@li...
>  > Date: 03/13/2011 09:20 AM
>  > Subject: [Ejbca-develop] Question with Certificate profile
>  > ------------------------------------------------------------------------
>  >
>  >
>  >
>  > Hi all,
>  >
>  > I have a question regarding how ejbca certificate profile suppose to
>  > work; I have created a certificate
>  > profile through ejbca admin web; what I would like to see happen is for
>  > ejbca to use the subject DN
>  > information in the CSR to generate the certficates. It seems to me that
>  > ejbca is forcing me to specify
>  > user subject DN prior to using the certificate profile. So, my question
>  > is this: how can I configure certificate
>  > profile in ejbca so that the certificates generated using the profile
>  > would use subject DN from the CSR instead
>  > of canned one specified in the profile.
>  >
>  > Thanks,
>  >
>  >
> Ike------------------------------------------------------------------------------
>  > Colocation vs. Managed Hosting
>  > A question and answer guide to determining the best fit
>  > for your organization - today and in the future.
>  >
> http://p.sf.net/sfu/internap-sfd2d_______________________________________________
>  > Ejbca-develop mailing list
>  > Ejb...@li...
>  > https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>  >
>  >
>  > ------------------------------------------------------------------------
>  >
>  >
> ------------------------------------------------------------------------------
>  > Colocation vs. Managed Hosting
>  > A question and answer guide to determining the best fit
>  > for your organization - today and in the future.
>  > http://p.sf.net/sfu/internap-sfd2d
>  >
>  >
>  > ------------------------------------------------------------------------
>  >
>  > _______________________________________________
>  > Ejbca-develop mailing list
>  > Ejb...@li...
>  > https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
>
>
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop