[389-users] Create Certificate Signing Request File

Hello,

I need to create certificate signing request file that can be sent to certificate authority vendors, like GoDaddy, etc. I have two questions:

1) The certutil command line output a CSR file which has different format than the CSR file generated using 389-console the GUI. The main difference is that the certutil command line generates something like:

Certificate request generated by Netscape certutil
Phone: xxx-xxx-xxxx

Common Name: ....
Email: (not specified)
Organization: my organization
State: ...
Country: US

Following above, it's the "BEGIN NEW CERTIFICATE" section.

However, if it's GUI, only "BEGIN NEW CERTIFICATE" section is there.

Why the two methods generates output file different? Will it be ok to just use certuti command output with "BEGIN NEW CERTIFICATE" section to send to vendor?

2) Do I also need to create certificate signing request file for each admin server? Will that be the same procedure for the directory server instance?

Thanks,
- xinhuan
--
389-users mailing list
389-users@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org