Re: [Ejbca-develop] Multiple Certificates Per End Entity

[Joenateen <mse...@ho...>]

Thanks for the quick response. 

So when I follow the steps I listed, I only get one certificate.
Specifically the certificate that I ask for in the user interface following
the "Create Keystore" link. I do notice that the second step of certificate
enrollment asks for which certificate to generate. It generates the
certificate specified but I am back to the issue of only getting one
certificate. If I go through the process again. It tells me that the user is
not in the right state to generate the second certificates. I am sure that I
am just using the interfaces wrong. 

Now if I go back to the admin screens and put the users back in the "New"
state, I can generate the second certificate with no problem. I think I made
a bad assumption in assuming that I could generate multiple certificates for
the user from one pass through the "Create Keystore" interface. 

Is this the intended behavior for the interface in the "out of the box"
functionality?


Tomas Gustavsson wrote:
> 
> 
> Yes, that is correct. What is not as expected with that? Combine it with
> Thams suggestion and you can create multiple certificates immediately
> one after the other.
> 
> The extra zip is available from the download page. It contains all code
> with tests, samples, docs, etc.
> http://ejbca.org/download.html
> 
> Cheers,
> Tomas
> 
> 
> Joenateen wrote:
>> Ok, so let me see if I have this straight. I am seeing two certificates
>> in
>> the end user now. But it is not what I expected. In order to create
>> multiple
>> certificates for a user
>> 
>> 1. Create the certificate profiles for each certificate I want to issue.
>> 2. Create the "End Entity Profile" and select the certificates that I
>> want
>> to have issued to a user assigned to a given "End Entity Profile" in the
>> "Available Certificate Profiles" list box (multiselect).
>> 3. Create a user and specify the "End Entity Profile" with aforementioned
>> certificates.
>> 4. Go to the public web section and request the certificates using the
>> "Create Keystore" link.
>> 
>> Right?
>> 
>> I also am having troubles finding the example code for the external RA
>> function. I don't have SVN for the windows platform. Is there a zip file
>> somewhere?
>>  
>> 
>> Tomas Gustavsson wrote:
>>>
>>> Yes it is exactly this that is the purpose of the "user" concept, so you
>>> can have multiple certificates easily viewable for each user.
>>>
>>> Just issue a new certificate for the same username and it will have
>>> multiple certificates. "Edit End Entity", you can select new certificate
>>> profiles to have different types of certificates.
>>>
>>> Cheers,
>>> Tomas
>>> -----
>>> PrimeKey Solutions offers a commercial EJBCA support subscription and
>>> training for EJBCA. Please see www.primekey.se or contact
>>> in...@pr... for more information.
>>> http://www.primekey.se/Services/Support/
>>> http://www.primekey.se/Services/Training/
>>>
>>> Mark Seaborn wrote:
>>>> Is it possible to create more than one certificate for any given end
>>>> entity? I want to be able to create certificates for an end user for
>>>> different applications and not use the same cert for every user
>>>> application. I have been and am still digging in the users pages but
>>>> have
>>>> not found the answer
>>>>
>>>>  
>>>>
>>>> Thanks
>>>>
>>>> Joenateen
>>>>  		 	   		  
>>>> _________________________________________________________________
>>>> Your E-mail and More On-the-Go. Get Windows Live Hotmail Free.
>>>> http://clk.atdmt.com/GBL/go/196390709/direct/01/
>>>>
>>>>
>>>> ------------------------------------------------------------------------
>>>>
>>>> ------------------------------------------------------------------------------
>>>> This SF.Net email is sponsored by the Verizon Developer Community
>>>> Take advantage of Verizon's best-in-class app development support
>>>> A streamlined, 14 day to market process makes app distribution fast and
>>>> easy
>>>> Join now and get one step closer to millions of Verizon customers
>>>> http://p.sf.net/sfu/verizon-dev2dev 
>>>>
>>>>
>>>> ------------------------------------------------------------------------
>>>>
>>>> _______________________________________________
>>>> Ejbca-develop mailing list
>>>> Ejb...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>
>>> ------------------------------------------------------------------------------
>>> This SF.Net email is sponsored by the Verizon Developer Community
>>> Take advantage of Verizon's best-in-class app development support
>>> A streamlined, 14 day to market process makes app distribution fast and
>>> easy
>>> Join now and get one step closer to millions of Verizon customers
>>> http://p.sf.net/sfu/verizon-dev2dev 
>>> _______________________________________________
>>> Ejbca-develop mailing list
>>> Ejb...@li...
>>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>>
>>>
>> 
> 
> 
> ------------------------------------------------------------------------------
> This SF.Net email is sponsored by the Verizon Developer Community
> Take advantage of Verizon's best-in-class app development support
> A streamlined, 14 day to market process makes app distribution fast and
> easy
> Join now and get one step closer to millions of Verizon customers
> http://p.sf.net/sfu/verizon-dev2dev 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 

-- 
View this message in context: http://old.nabble.com/Multiple-Certificates-Per-End-Entity-tp27048018p27062392.html
Sent from the EjbCA - Dev mailing list archive at Nabble.com.