Sorry, I misunderstood something. Not the oid shall be DER encoded, but its value and the correct syntax (in OpenSSL 0.9.6b) is: OID=:DER:some:octets:and:more:octets.
There is only one minor point: when I generate a text version of the cert I get a cariage return and a period in the extension, which is not present in its DER encoding, for instance: .. 1.0.8571.2: .^[EMAIL PROTECTED] The encoding in the config file was: 1.0.8571.2=DER:16:0D:74:65:73:74:31:40:72:73:61:2E:63:6F:6D Maybe caused by emacs? Any hint, or simply ignore? Thanks, Gerd Gerd Schering wrote: > > In the openssl.cnf file I found the following example > for RAW DER hex encoding en extension: > > 1.2.3.5=RAW:02:03 > > Could someone explain that to me or point me to some docs? > I thought, 1.2.3.5 represented an OID, so the encoding > should start with 06. > In case its only a dummy, what would be the real encoding > of 1.2.3.5 ? > > Thank's a lot! > Gerd > > ------------------------------------------------------ > -- Gerd Schering > -- Email: [EMAIL PROTECTED] > ------------------------------------------------------ ------------------------------------------------------ -- Gerd Schering -- Email: [EMAIL PROTECTED] ------------------------------------------------------ ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]