I rather not use the openssl config file, and stick with aPI's. >is it really an octet string containing one ASCII character "5"? no, it was just a simple example, the real values is are PRINTABLESTRING and INTEGER.
Is that ehat you meant: ASN1_OCTET_STRING *os = ASN1_OCTET_STRING_new(); ASN1_OCTET_STRING_set( os, "ABC test", 8 ); unsigned char *d = NULL; int dlen = i2d_ASN1_OCTET_STRING( os, &d ); ASN1_OCTET_STRING os2 = ASN1_OCTET_STRING_new(); ASN1_OCTET_STRING_set( os2, d, dlen ); Cause I still gey rubbish... Is there an example of how to set such custom extension to CSR? -- View this message in context: http://openssl.6102.n7.nabble.com/Adding-a-custom-extension-to-a-CSR-tp47446p47501.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org