Re: [Ejbca-develop] nsCertType=server

[Tomas G. <to...@pr...>]

I must admit that I doubt they recently introduce nsCertType. That extension is 
not standard but a proprietary one originating from Netscape 4.x time, that is 
like 10 years ago. It haven't been used for the last five years or so.

"Server Auth" in the 'Extended key usage' extension is a standard extension with 
the same meaning as the old proprietaty nsCertType extension.
It's not the same, it's a new (several years old that is) standard that is 
sligtly better designed :-)

/Tomas


Jon Bendtsen wrote:
> Den 3. nov 2005 kl. 9:05 skrev Tomas Gustavsson:
> 
>>
>> In you openvpn server configuration file, comment out the line:
>> ns-cert-type server
>>
>> i.e.
>> ;ns-cert-type server
>>
>> nsCertType is a very old and deprecated extention, so we don't plan  
>> to introduce it. No-one uses it anymore :-)
> 
> 
> openvpn uses it, and openvpn is not that old. I think they just
> introduced this option, so clearly it is used.
> 
> But what does that field called "Server Auth" do? i thought
> that it set the ns-crt-type to server.
> 
> Is there anywhere i can read more about these fields?
> 
> 
> 
> JonB
> 
> 
> -------------------------------------------------------
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. 
> Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop