Page History

IMPORTANT: adapt the settings/openssl-rsa.cnf  and settings/openssl-ecdsa.cnf settings before issuing the CA. In particular:

• crlDistributionPoints = http://ocsp.hosted.eduroam.org/rsa/user-root/crl.der respectively http://ocsp.hosted.eduroam.org/ecdsa/user-root/crl.der
• caIssuers;URI.0 = http://ocsp.hosted.eduroam.org/rsa/user-root/cacert.crt respectively http://ocsp.hosted.eduroam.org/ecdsa/user-root/cacert.crt
• OCSP;URI.0 = http://ocsp.hosted.eduroam.org/rsa/user-root/ocsp respectively http://ocsp.hosted.eduroam.org/ecdsa/user-root/ocsp

For reference: the end user certificates created by the intermediate CA will have the following URLs for these fields:

• caIssuers;URI.0 = http://ocsp.hosted.eduroam.org/rsa/user-intermediate-1/cacert.crt  respectively http://ocsp.hosted.eduroam.org/ecdsa/user-intermediate-1/cacert.crt
• OCSP;URI.0 = http://ocsp.hosted.eduroam.org/rsa/user-intermediate-1/ocsp respectively http://ocsp.hosted.eduroam.org/ecdsa/user-intermediate-1/ocsp