Re: [Ejbca-develop] EJBCA and CSR Suggested Key Usages

[Tomas G. <to...@pr...>]

Hi,

Yes you can do it.

Take a look at the "override" settings in certificate profiles, and CA 
configuration. Should be some documentation links in there as well.

Cheers,
Tomas
-----
Save time and money with an Enterprise support subscription. Please see 
www.primekey.se for more information.
http://www.primekey.se/Products/EJBCA+PKI/
http://www.primekey.se/Services/Support/
On 2015-03-13 18:53, William Roberts wrote:
> EJBCA folks,
>
> I am new to the world of CA's, so bear with me please.
>
> Current Problem:
> Microsoft CA has 4 registry keys that can be set to templates. Thus when
> a CSR comes in, one of 4 possible templates is used. This level of
> granularity does not suit me. Thus I am interested in using EJBCA for
> this solution.
> See:
> http://social.technet.microsoft.com/wiki/contents/articles/9063.network-device-enrollment-service-ndes-in-active-directory-certificate-services-ad-cs.aspx
>
> What I need to do:
> Via some remote interface, like SCEP but doesn't have to be, upload a
> CSR and have all the fields honored. For instance, a snippet of my CSR:
>
> --- snippet from CSR dump with openssl ---
>          Requested Extensions:
>              X509v3 Key Usage: critical
>                  Digital Signature
>              X509v3 Extended Key Usage:
>                  TLS Web Client Authentication, scardLogin, Any Extended
> Key Usage
>              X509v3 Certificate Policies:
>                  Policy: 2.16.840.1.101.3.2.1.3.13
>
> Is their a way to configure EJBCA for this support, and any doc links
> are much appreciated. Thank you.
>
>
> --
> Respectfully,
>
> William C Roberts
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website, sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for all
> things parallel software development, from weekly thought leadership blogs to
> news, videos, case studies, tutorials and more. Take a look and join the
> conversation now. http://goparallel.sourceforge.net/
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>