Noor Haizad Mohd Said wrote:
>
> Dear All,
>
> I need your help for this matter. I get stuck when trying to add new
> extension to x509 cert. In Windows 2000 Server, they add new extension
> for their x509 certificates called CA Version. I try to add that new oid
> into the config file but it seems my cert doesn't contains the extension
> after creating it..
>
If you added the OID and info to the relevant section you'd probably get
an error. Extensions need additional support to encode, decode, print
and set them.
So without that lot it wont work. Is that particular extension
documented anywhere?
> One other thing, I also try to add CRL Distribution extension into the
> cert? Can it just being added into the config file? Can somebody show me
> some example on how to do that?
>
docs/openssl.txt gives info about supported extensions and their syntax.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
