Hi,
I need to add the following in the certificate request.
id-ce-subjectAltName OBJECT IDENTIFIER ::= { id-ce 17 }
subjectAltName = GeneralNames
otherName [0] OtherName
OtherName ::= Sequence {
Id-on-hardwareModuleName OBJECT IDENTIFIER ::= iso(1)
identified-organization(3) dod(6)
internet(1) security(5) mechanisms(5) pkix(7) on(8) 4
HardwareModuleName ::= SEQUENCE {
hwType OBJECT IDENTIFIER
hwSerialNum OCTET STRING
}
}
I able to generate the certificate required using openSSl cmd line with
conf where following was added in config file
[ v3_req ]
# Extensions to add to a certificate request
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
*subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:hmodname*
*[hmodname]*
*hwType = OID:1.3.6.1.4.1.47196.6.3.2.2*
*hwSerialNum = FORMAT:HEX,OCT:01020304 *
I need to do add subject alt name in certificate request using openSSL
API.( not using config file)
I have tried to use GENERAL_NAME_set0_othername , but I am not able to add
an inner sequence.
Can someone suggest how we can add this using OpenSSL APIs
Regards
Manish
