[[EMAIL PROTECTED] - Thu Sep 5 09:23:59 2002]: > > This patch is a replacement for RT/openssl.org: Ticket #237. Please > retract Ticket #237. > > The following patch provides basic support for Subject Directory > Attributes, which are defined in the x509 spec (RFC 2459), but are > currently unsupported by OpenSSL. openssl.cnf entries for Subject > Directory Attributes should be formed as follows: > > subjectDirectoryAttribute = type:<type-objectname>, \ > value:<value-objectname|DER:<hexstring>> > > Example: > > subjectDirectoryAttributes = > type:corestreet,value:DER:3081cd3081ca3081ca... > > An OID for "Corestreet Credential Validation" has also been added to > provide support for Dr. Silvio Micali's certificate validation > mechanism. > > The follow diff is relative to the 9/03/02 snapshot. > >
The new ASN1 generator in OpenSSL 0.9.8 should be able to do this using a human readable syntax. See ASN1_generate_nconf(3) and doc/openssl.txt in 0.9.8 ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
