Datasheet

“main” (Installation and Administration) — 2004/6/25 — 13:29 — page 628 — #654
i
i
i
i
i
i
i
i
Figure 26.3: Certificates of a CA
Changing Standard Values
The previous sections explained how to create sub-CAs, client certificates,
and server certificates. Special settings are used in the extensions of the
X.509 certificate. These settings have been given rational defaults for every
certificate type and do not normally need to be changed. However, it may
be that a particular application has special requirements in relation to the
content of these extensions. If you frequently create certificates for an ap-
plication of this kind, it may make sense to adjust the defaults. Otherwise,
start from scratch every time you create a certificate.
The system manages a set of defaults for every CA for the creation of sub-
CAs, client certificates and server certificates. To change these defaults, en-
ter the required CA, as described in Section 26.1.2 on page 626. After click-
ing ‘Extended’, find the ‘Defaults’ option, where you can choose for which
type the settings should be changed. After this, reach the dialog for chang-
ing the defaults, shown in Figure 26.4 on the facing page.
628 26.1. X.509 Certification with YaST