Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

FAQ: technically constraining a subCA that issues clientAuth certs

38 views
Skip to first unread message

Kathleen Wilson

unread,
May 9, 2013, 2:24:13 PM5/9/13
to mozilla-dev-s...@lists.mozilla.org
All,

I've added a question and answer to
https://wiki.mozilla.org/CA:CertificatePolicyV2.1#Frequently_Asked_Questions

The question:
"3. How do I technically constrain an external subordinate CA
certificate that will only be used to issue end-user certificates
intended for client authentication?"

See the wiki page for the answer.

Please reply if you have feedback on this.

Thanks,
Kathleen
0 new messages