Adding extensions X509_REQ or X509?

Good morning By difficulty -- From what I can make out of the docs and code it is only possible to add extensions to a X509_REQ structure and not a X509 structure. Should this be the case, how do I convert from the X509_REQ to the X509 or alternatively how do I add extensions to a X509

OpenSSL certs working with Netscape Fastrack Server ?

Hi list members, I'd like to know whether the certificates created by OpenSSL are working with Netscape Fastrack Webserver or not (only server-authentication). Otherwise I have to buy a costy commercial license instead! Any hint appreciated. Mit freundlichen Grüßen / With kind regards

binding IP addresses to X.509 certificates for use with OpenSSL?

Hi Guys, I have come accross an issue here, where some fellow designers want to generate an x.509 certificate for use with OpenSSL, but they want to specifically bind the generated cert to only be used with one individual IP address. Is this possible? I have been doing a bit of reading up

RE: binding IP addresses to X.509 certificates for use with OpenSSL?

You can use altSubjectName for the IP address but you'll have to do the validation yourself (AFAIK) since OpenSSL doesn't. A cert is normally just specifies the DNS name of the server but I've encountered clients who want to lock things down more tightly than that (so they are immune to a DNS

Re: binding IP addresses to X.509 certificates for use with OpenSSL?

At 09:52 29.11.2001 +, you wrote: Hi Guys, I have come accross an issue here, where some fellow designers want to generate an x.509 certificate for use with OpenSSL, but they want to specifically bind the generated cert to only be used with one individual IP address. Is this possible? I