MBOX-Line: From arnt at gulbrandsen.priv.no  Thu Jul 17 09:59:43 2008
To: imap-protocol@u.washington.edu
From: Arnt Gulbrandsen <arnt@gulbrandsen.priv.no>
Date: Fri Jun  8 12:34:42 2018
Subject: [Imap-protocol] Re: issue with the iPhone IMAP client
In-Reply-To: <"08Jul17. 093304pdt. 58698"@synergy1.parc.xerox.com>
References: <"08Jul16. 163302pdt. 58698"@synergy1.parc.xerox.com> <"08Jul17.
	093304pdt. 58698"@synergy1.parc.xerox.com>
Message-ID: <N36CVWuxWb0eE4LL+o3lAQ.md5@lochnagar.oryx.com>

Bill Janssen writes:
> Any other ideas?

Sometimes clients want the cert to have specific properties. When I used 
openssl to sign a cert for myself a month or two ago, I had to struggle 
a little. I appear to have finished off with these properties:
keyUsage = nonRepudiation, digitalSignature, keyEncipherment, cRLSign, 
keyCertSign

Arnt

