On Fri, Feb 09, 2007, Srinivasan Thirunarayanan wrote:
> Is it possible to have more than one AuthorityKeyIdentifiers in a
> certificate? The X509 RFC says thus: AuthorityKeyIdentifier ::=
> SEQUENCE {
> keyIdentifier [0] KeyIdentifier OPTIONAL,
> authorityCertIssuer [1] GeneralNames OPTIONAL,
> authorityCertSerialNumber [2] CertificateSerialNumber
> OPTIONAL }
>
> But so far, i haven't been able to find any certificate with more than
> one AuthorityKeyIdentifier.
>
> Is it possible to create a certificate in OpenSSL with more than one
> AuthorityKeyIdentifier? If so, how do i do it?
>
IMHO doing that is illegal, if it isn't specifically prohibited by the
standards it should be.
Since you can only sign a certificate using one key I'm not sure why
you'd want to.
Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
