problems with X.509 certs + KDE 3.1 + KMail ??

[Zdenek Pizl]

Dne pátek, 7. únor. 2003 17:00 Bernhard Reiter <bernhard@intevation.de> 
napsal(a):
> There are several options to openssl.
> It really is complex and I'm not an expert.

> This is fine:
>
> The SPHINX specification (and others)
> requires the e-mail-address to be in the extention like
>             X509v3 Subject Alternative Name:
>                 email:bernhard@intevation.de

aha, I am sure enough that our certificates don't have altName feature. OK, 
I'll check it ...

But I can't understand it, why it does rely on (optional) altName when email 
can be 
obtained from the standard DN ??

> 	subjectAltName=email:intevation@intevation.de,URI:http://intevation.net
> 	issuerAltName=email:intevation@intevation.de,URI:http://intevation.net

this is your personalized openssl.conf settings , isn't it?

Regards,
		Z. P.