Sorry,

I misunderstood something.
Not the oid shall be DER encoded, but its value and the correct 
syntax (in OpenSSL 0.9.6b) is:
OID=:DER:some:octets:and:more:octets.

There is only one minor point: when I generate a text version
of the cert I get a cariage return and a period in the extension,
which is not present in its DER encoding, for instance:
..
 1.0.8571.2:
       .^[EMAIL PROTECTED]  

The encoding in the config file was:
1.0.8571.2=DER:16:0D:74:65:73:74:31:40:72:73:61:2E:63:6F:6D

Maybe caused by emacs?
Any hint, or simply ignore?

Thanks,
Gerd


Gerd Schering wrote:
> 
> In the openssl.cnf file I found the following example
> for RAW DER hex encoding en extension:
> 
> 1.2.3.5=RAW:02:03
> 
> Could someone explain that to me or point me to some docs?
> I thought, 1.2.3.5 represented an OID, so the encoding
> should start with 06.
> In case its only a dummy, what would be the real encoding
> of 1.2.3.5 ?
> 
> Thank's a lot!
> Gerd
> 
> ------------------------------------------------------
> -- Gerd Schering
> -- Email: [EMAIL PROTECTED]
> ------------------------------------------------------

------------------------------------------------------
-- Gerd Schering
-- Email: [EMAIL PROTECTED]
------------------------------------------------------
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to