The OID 1.3.6.1.5.5.7.3.4 specifies the key usage for e-mail protection: http://www.alvestrand.no/objectid/1.3.6.1.5.5.7.3.4.html
This OID is necessary to use the certificate with openssl smime -sign and -verify. If it is not in the certificate, the verification fails with a certificate purpose error. I think it would be useful to add this OID to the sample template on the certtool invocation page: http://www.gnutls.org/manual/html_node/certtool-Invocation.html Regards, Sascha
_______________________________________________ Gnutls-help mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnutls-help
