Hi i am trying to add custom oid and supplied the value from UI.
label: I18N_OPENXPKI_UI_PROFILE_TLS_SERVER_LABEL
validity:
notafter: +05000
style:
# 00_basic_style:
# label: I18N_OPENXPKI_UI_PROFILE_BASIC_STYLE_LABEL
# description: I18N_OPENXPKI_UI_PROFILE_BASIC_STYLE_DESC
# ui:
# subject:
# - hostname
# - hostname2
# - port
# # info:
# # - requestor_gname
# # - requestor_name
# # - requestor_email
# # - requestor_affiliation
# # - comment
# subject:
# dn: CN=[% hostname.lower %][% IF port AND port != 443 %]:[%
port %][% END %]
# san:
# DNS:
# - "[% hostname.lower %]"
# - "[% FOREACH entry = hostname2 %][% entry.lower %] |
[% END %]"
# metadata:
# requestor: "[% requestor_gname %] [% requestor_name %]"
# email: "[% requestor_email %]"
# entity: "[% hostname FILTER lower %]"
05_advanced_style:
label: I18N_OPENXPKI_UI_PROFILE_ADVANCED_STYLE_LABEL
description: I18N_OPENXPKI_UI_PROFILE_ADVANCED_STYLE_DESC
ui:
subject:
- cn
- o
- ou
- dc
- c
- sid
san:
- san_ipv4
- san_dns
# info:
# - requestor_gname
# - requestor_name
# - requestor_email
# - requestor_affiliation
# - comment
subject:
dn: CN=[% CN %][% IF OU %][% FOREACH entry = OU %],OU=[% entry
%][% END %][% END %][% IF O %],O=[% O %][% END %][% FOREACH entry = DC
%],DC=[% entry %][% END %][% IF C %],C=[% C %][% END %]
# no san definitions here as items from ui.san are directly
written to the SAN
enroll:
subject:
dn: CN=[% CN.0 %],DC=NADRA, DC=GOV, DC=PK
san:
dns: "[% FOREACH entry = SAN_DNS %][% entry.lower %] | [%
END %]"
ip : "[% FOREACH entry = SAN_IP %][% entry %] | [% END %]"
metadata:
system_id: "[% data.cust_id %]"
server_id: "[% data.server_id %]"
entity: "[% CN.0 FILTER lower %]"
sid: "[% data.SID %]"
# Profile extensions - set 0/1 as needed
# Also see sections defined in default.yaml
extensions:
key_usage:
critical: 1
digital_signature: 1
non_repudiation: 0
key_encipherment: 1
data_encipherment: 0
key_agreement: 1
key_cert_sign: 0
crl_sign: 0
encipher_only: 0
decipher_only: 0
extended_key_usage:
critical: 0
client_auth: 0
server_auth: 1
email_protection: 0
code_signing: 0
time_stamping: 0
ocsp_signing: 0
oid:
1.3.6.1.4.1.311.25.2:
critical: 0
format: ASN1
encoding: UTF8String
value: [% data.SID %]
in generated cert
value: [% data.SID %] is not being evaluated or extracted as entered in the
UI.
with custom oid field value is
0c 09 5b 25 20 73 69 64 .. [% data.SID
20 25 5d %]
please help thank you
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users