The default CN prompt message can be confusing when often the CN needs to

 be the server FQDN: change it.
[Reported by PSW Group]

diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index 9d2cd5bfa52f3121b08b494a0ea4bbfbba32ea31..18760c6e673d76ea7d83995e7b6dc5ec48839adb 100644 (file)
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -145,7 +145,7 @@ localityName                        = Locality Name (eg, city)
 organizationalUnitName         = Organizational Unit Name (eg, section)
 #organizationalUnitName_default        =
 
-commonName                     = Common Name (eg, YOUR name)
+commonName                     = Common Name (e.g. server FQDN or YOUR name)
 commonName_max                 = 64
 
 emailAddress                   = Email Address