On Thu, Aug 05, 2004, Craig Gleadall wrote:
> I guess I should have re-read the RFC (again)... :-( Sorry everybody
>
> Extension ::= SEQUENCE {
>extnID OBJECT IDENTIFIER,
>criticalBOOLEAN DEFAULT FALSE,
>extnValue OCTET STRING }
>
>
> IE did displa
I guess I should have re-read the RFC (again)... :-( Sorry everybody
Extension ::= SEQUENCE {
extnID OBJECT IDENTIFIER,
criticalBOOLEAN DEFAULT FALSE,
extnValue OCTET STRING }
IE did display the extnValue as expected then. I thought that the
extention w
On Thu, Aug 05, 2004, Craig Gleadall wrote:
> Abdou,
> The 04:20 is teh DER encoding for an OctetString that is 0x20 bytes long.
> What I would have expected to happen was my Sequence to be place right
> after the DER encoded OID for 2.5.29.16, but allas it is deciding that the
> DER data
Abdou,
The 04:20 is teh DER encoding for an OctetString that is 0x20 bytes long. What I
would have expected to happen was my Sequence to be place right after the DER encoded
OID for 2.5.29.16, but allas it is deciding that the DER data that I am providing must
be an OctetString.
The problem
--- Craig Gleadall <[EMAIL PROTECTED]> a écrit :
> Hello,
> I am trying to get my CA to issue a user
> certificate with the
> privateKeyUsagePeriod extention (2.5.29.16). This
> extension includes a
> notBefore and notAfter GeneralizedTime attribute. I
> saw in the
> openssl.cnf file that
Hello,
I am trying to get my CA to issue a user certificate with the
privateKeyUsagePeriod extention (2.5.29.16). This extension includes a
notBefore and notAfter GeneralizedTime attribute. I saw in the
openssl.cnf file that I can specify attributes with DER encoded data. I
tried this for 2
