On Sat, Jan 15, 2005, Kraemmer Thomas wrote: > Is there a way to display the subjectAltName:othername extension > properly with openssl? > > > Doing so with either openssl 0.9.7e or the current snapshot only yields > an incomplete output. > The contents of the othername extension are not shown but marked as > unsupported: > > secure# openssl x509 -text -in mscert.cer > ---snip--- > X509v3 Subject Alternative Name: > othername:<unsupported>, > email:[EMAIL PROTECTED] > ---snip--- >
The 'otherName' option can't in general be output because the format of the extension field 'value' is determined by the 'type-id' OID. It would be possible (though it doesn't at present) to handle specific OIDs and display those in an appropriate manner as well as performing some generic action in other cases: for example printing out string types and ASN1 parsing the rest. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
