CN specification for hosts in pkinit certs
Greg Hudson
ghudson at MIT.EDU
Wed Jan 8 12:38:11 EST 2014
On 01/08/2014 06:26 AM, lux-integ wrote:
> I am editing the openssl.cnf and for users certs
> I use
> user at REALM for the CN (commmonName) and
> emailaddress for emailAddress
>
> for hosts I omit the email address but I am a bit puzzled what to use for CN
> (commonName)
I don't think our PKINIT code looks at the CN field, so you can use
whatever you want there.
More information about the Kerberos
mailing list