Massimiliano Pala wrote:
>
> I am forwarding this message to the openssl-dev list so as to ask for
> support in generating such CSLs (read on). Some chance in getting help
> to write the code ??? Actually the CRLs do not support extentions in
> OpenSSL, isn't it ??
>
Well it does support extensions but not IDP or deltaCRL.
Rhe standard CRL generation utility 'ca' can't handle CRL entry
extensions either. 'ca' probably isn't suited to the task and something
like an option to the 'crl' program to allow a CRL to be generated from
a config file would IMHO be the best way.
This probably wont make it into 0.9.5 but maybe the next release...
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
