Possibly do an asndump on a cert that has a friendly name and see what it's really doing?
-----Original Message----- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Hopkins, Nathan Sent: Thursday, December 01, 2011 4:36 PM To: openssl-users@openssl.org Subject: RE: Friendly name I looked through the OID and couldn't see anything - I'm sure this must be possible? -----Original Message----- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jakob Bohm Sent: 01 December 2011 21:22 To: openssl-users@openssl.org Subject: Re: Friendly name On 12/1/2011 9:25 PM, Hopkins, Nathan wrote: > > I'm using the below commands to create a ca ... > > openssl genrsa -des3 -out ca.key 2048 > > openssl req -new -x509 -key ca.key -out ca.crt -days 730 > > ** > > ... please can you advise how I can add a "friendly name" to this cert? > > ** > The "Friendly name" is the extended attribute with OID 1.2.840.113549.1.9.20 I don't remember if openssl has a name for this attribute or if you will have to refer to the OID directly. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
