📄 xca-3.html
字号:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><HTML><HEAD> <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.21"> <TITLE>XCA : The Wizard </TITLE> <LINK HREF="xca-4.html" REL=next> <LINK HREF="xca-2.html" REL=previous> <LINK HREF="xca.html#toc3" REL=contents></HEAD><BODY><A HREF="xca-4.html">Next</A><A HREF="xca-2.html">Previous</A><A HREF="xca.html#toc3">Contents</A><HR><H2><A NAME="wizard"></A> <A NAME="s3">3.</A> <A HREF="xca.html#toc3">The Wizard </A></H2><P>The Wizard is the central part for collecting all data regarding Certificates,Requests and Templates. It will be invoked for generating Requests, Certificatesand Templates and for changing Templates.</P><H2><A NAME="ss3.1">3.1</A> <A HREF="xca.html#toc3.1">Template selection</A></H2><P>On this page the template to be used can be selected. All following pages will be preset to the appropriate values of the selected template. If you don't want to use a template just select the <CODE>Empty Template</CODE>.If the checkbox labeled: <CODE>Change the default extensions of the template</CODE>is checked the Wizard will show 3 more pages containing all certificate extensions.The lazy people leave this checkbox unchecked.</P><P>For generating Certificates there is a drop-down list of all Requests that are available. If you don't want to sign a request but generate a certificate from scratchor template, uncheck the checkbox to the left of the request list.Also only for creating certificates the signer of the new certificatecan be selected wether it shall become a <EM>self-signed</EM> certificateor get signed by one of the <A HREF="xca-6.html#ca_cert">CA certificates</A> in the drop-down list.</P><P>This page is not shown when creating or changing templates.</P><H2><A NAME="ss3.2">3.2</A> <A HREF="xca.html#toc3.2">Personal settings</A></H2><P>On this Page all personal data like country, name and Email addresscan be filled in. Only the <CODE>Internal name</CODE> is mandatory.The <CODE>Country code</CODE> field must either be empty or exactly containtwo letters representing your country code; e.g. <EM>DE</EM> for Germany.If you want to create a SSL-server certificate the <CODE>Common name</CODE>must contain the <EM>DNS</EM> name of the server.</P><P>Keys can be generated here <EM>on the fly</EM> by pressing the button.The newly generated key will be stored in the database, even if you cancel the Wizard. The drop-down list of the keysdoes only contain keys that were not used by an other certificate orrequest. The Keylist is not available for creating or changing templates.</P><P>This page does not appear when signing a request, because the request doescontain all needed data from this page.</P><H2><A NAME="ss3.3">3.3</A> <A HREF="xca.html#toc3.3">X509v3 Extensions</A></H2><P>The following 3 pages do contain all fields for adjusting the certificate extensions.It is not in the focus of this document to explain them in detail.The most important are the <CODE>Basic Constraints</CODE> and the <CODE>Validity</CODE> range.</P><P>For more information consult the documents in <A HREF="xca-1.html#otherdoc">otherdoc</A>.Expecially if you don't know what this is all about consider not to create anycertificates before reading those documents.</P><H3>Basic Constraints</H3><P>If the <CODE>CA</CODE> flag is set to true the certificate is recognized by XCA and otherinstances as issuer for other certificates. Server-certificates or E-Mail certificatesmust have set this flag to <CODE>false</CODE></P><H3>Validity Range</H3><P>The <EM>not Before</EM> field is set to the current date and time of theoperating system and the <EM>not After</EM> field is set to the current date and timeplus the specified time range.</P><HR><A HREF="xca-4.html">Next</A><A HREF="xca-2.html">Previous</A><A HREF="xca.html#toc3">Contents</A></BODY></HTML>⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -