I tried this, but there a problem, the syntax changes, eg:
nsComment="Hello world"
cannot be transformed into
[EMAIL PROTECTED]

[Section1]
Hello world

Or when you have a subvalue:
crlDistributionPoint=URI:http//foo/foo.crl
cannot be transformed in
[EMAIL PROTECTED]

[Section2]
URI:http//foo/foo.crl

the right syntax is:
[Section2]
URI=http//foo/foo.crl

So I have no way to programly know when I can use a "@" and when I need to
transform ":" into "=".

Fr�d�ric Giudicelli
http://www.newpki.org
----- Original Message ----- 
From: "Dr. Stephen Henson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, October 14, 2003 1:57 AM
Subject: Re: Proposed modification for Extension Parser


> On Mon, Oct 13, 2003, Dr. Stephen Henson wrote:
>
> > On Mon, Oct 13, 2003, Fr�d�ric Giudicelli wrote:
> >
> >
> > You have several options. You can populate the structure yourself and
the add
> > it to the certificate using X509_add_ext_i2d() then you can use whatever
> > syntax you want.
> >
> > Alternatively you can use the NCONF code to write your own handler and
use
> > X509V3_EXT_nconf() instead: new code should used the nconf variants
anyway.
> >
> > You'll have to do this if you want to handle more complex extensions
like
> > CertificatePolicies or for the new functionality like the dirName forms
such
> > as subjectAltName in 0.9.8.
> >
>
> Another alternative is to create a config file in a memory BIO using the
> @section syntax.
>
> Steve.
> --
> Dr Stephen N. Henson.
> Core developer of the   OpenSSL project: http://www.openssl.org/
> Freelance consultant see: http://www.drh-consultancy.demon.co.uk/
> Email addresses, PGP and S/MIME: see homepage.
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to