On Sun, May 13, 2012 at 2:00 PM, Jeffrey Walton <[email protected]> wrote:
> On Sun, May 13, 2012 at 1:55 PM, Thomas Anderson <[email protected]> wrote:
>> openssl probably just doesn't recognize that OID.  Here's what
>> phpseclib (the latest SVN) shows for that particular extension:
>>
>>    [8] => Array
>>        (
>>            [extnId] => id-ce-subjectAltName
>>            [critical] =>
>>            [extnValue] => Array
>>                (
>>                    [0] => Array
>>                        (
>>                            [otherName] => Array
>>                                (
>>                                    [type-id] => 1.3.6.1.4.1.311.20.2.3
>>                                    [value] => [email protected]
>>                                )
>>
>>                        )
>>
>>                )
>>
>>        )
>>
>> Here's a link to phpsecllib: http://phpseclib.sourceforge.net/
>>
> Its private (4) for an enterprise (1):
> http://www.oid-info.com/cgi-bin/display?oid=1.3.6.1.4.1.311.20.2.3&action=display
>
> OpenSSL cannot possibly know how to interpret the (311) (20) (2)
> branch or the (3) leaf node.

Hmmm.  Weird.  asn1parse doesn't seem to mind.  Here's how that parses
the subjAltName extension:

    0:d=0  hl=2 l=  39 cons: SEQUENCE
    2:d=1  hl=2 l=  37 cons:  cont [ 0 ]
    4:d=2  hl=2 l=  10 prim:   OBJECT            :Microsoft Universal
Principal Name
   16:d=2  hl=2 l=  23 cons:   cont [ 0 ]
   18:d=3  hl=2 l=  21 prim:    UTF8STRING
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to