From 6cd71191f102d0f95ae1e61f67dce4bf748486b8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Fri, 12 May 2006 06:45:08 +0000 Subject: [PATCH] Point to more examples, hint that you have to use openssl 0.9.8a or later. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17547 ec53bebd-3082-4978-b11e-865c3cabbd6b --- doc/setup.texi | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/doc/setup.texi b/doc/setup.texi index e1da0d9c6..c1edd5149 100644 --- a/doc/setup.texi +++ b/doc/setup.texi @@ -1261,11 +1261,19 @@ lha@@EXAMPLE.ORG:CN=Love,UID=lha @section Use OpenSSL to create certificates +This section tries to give the CA owners hints how to create +certificates using OpenSSL (or CA software based on OpenSSL). + @subsection Using OpenSSL to create certificate with krb5PrincipalName -To make OpenSSL create certificate with krb5PrincipalName use the following +To make OpenSSL create certificate with krb5PrincipalName use +@file{openssl.cnf} as described below. To see an complete example of +creating client and KDC certificates, see the test-data generation +script @file{lib/hx509/data/gen-req.sh} in the source-tree. The +certicates it creates are used to test the PK-INIT functionality in +@file{tests/kdc/check-kdc.in}. -@file{openssl.cnf}. +To use this example you have to use OpenSSL 0.9.8a or later. @example