The default CN prompt message can be confusing when often the CN needs to

 be the server FQDN: change it.
[Reported by PSW Group]

diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index 9e59020c17643dd7988246a067ec8a5e75bd6170..8fdacae9db4d06999ed6f37edb78bd3f4b170ebd 100644 (file)
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -141,7 +141,7 @@ localityName                        = Locality Name (eg, city)
 organizationalUnitName         = Organizational Unit Name (eg, section)
 #organizationalUnitName_default        =
 
-commonName                     = Common Name (eg, YOUR name)
+commonName                     = Common Name (e.g. server FQDN or YOUR name)
 commonName_max                 = 64
 
 emailAddress                   = Email Address