On Wed, Jan 20, 2010, sandeep kiran p wrote:

> Hi,
> 
> Can I not include a long name when specifying an OID? Here is a part of my
> openssl.cnf file.
> 
> HOME = .
> RANDFILE         = $ENV::HOME/.rnd
> oid_section = new_oids
> 
> [ new_oids ]
> 
> testoid=My Test OID, 1.2.3.4
> 
> This gives back an error as,
> 
> D:\projects\openssl\openssl>openssl req -new -key rootkey.pem -out
> rootreq.pem
> problem creating object testoid=My Test OID, 1.2.3.4
> 144:error:0D06407A:asn1 encoding routines:a2d_ASN1_OBJECT:first num too
> large:.\crypto\asn1\a_object.c:109:
> 
> OID gets loaded when I don't specify the longname. So, should the long name
> be specified only for ASN1 or Engine configuration modules?
> 


If you want to use long names you have to use the ASN1 configuration module
in the configuration file. This has the advantage that the new OIDs then
become visible to all applications that support configuration modules.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to