Re: Add extra informations to certs

2009-03-31 Thread Kyle Hamilton
On Tue, Mar 31, 2009 at 2:18 PM, Dirk Reske wrote: > Yes, we know about the security issues with the extended private data. > But this is no commercial project, but a case study at our university. > > Dirk Alright. (If any university in the US tried to do anything like this they'd be up on ethic

Re: Add extra informations to certs

2009-03-31 Thread Dirk Reske
Kyle Hamilton schrieb: > On Tue, Mar 31, 2009 at 1:56 PM, Dirk Reske wrote: > >> Second, >> it's just plain bad PKI to put attributes in Identity Certificates. >> >> >> >> What do you mean with this? >> > > Placing additional attributes in the Identity Certificates makes those > attributes

Re: Add extra informations to certs

2009-03-31 Thread Dirk Reske
Patrick Patterson schrieb: Hi Dirk: Dirk Reske wrote: Patrick Patterson schrieb: Second, it's just plain bad PKI to put attributes in Identity Certificates. What do you mean with this? Well, to quot

Re: Add extra informations to certs

2009-03-31 Thread Kyle Hamilton
On Tue, Mar 31, 2009 at 1:56 PM, Dirk Reske wrote: > > > Second, > it's just plain bad PKI to put attributes in Identity Certificates. > > > > What do you mean with this? Placing additional attributes in the Identity Certificates makes those attributes available to everyone who can read them, and

Re: Add extra informations to certs

2009-03-31 Thread Patrick Patterson
Hi Dirk: Dirk Reske wrote: > Patrick Patterson schrieb: >>> >> Second, >> it's just plain bad PKI to put attributes in Identity Certificates. >> >> > What do you mean with this? > Well, to quote IETF RFC3281 (which has to do with Attribute Certificates): "Some people constantly confuse P

Re: Add extra informations to certs

2009-03-31 Thread Dirk Reske
Patrick Patterson schrieb: Hi Dirk: Dirk Reske wrote: li...@kaiser.cx schrieb: Hi, On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote: We need to put some extra informations (simple strings) into the certificates (e.g. year of bir

Re: Add extra informations to certs

2009-03-31 Thread Patrick Patterson
Hi Dirk: Dirk Reske wrote: > li...@kaiser.cx schrieb: >> Hi, >> >> On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote: >> >> >>> We need to put some extra informations (simple strings) into the >>> certificates (e.g. year of birth, ...). >>> I have looked around the internet, but don't

Re: Add extra informations to certs

2009-03-31 Thread Bruce Stephens
li...@kaiser.cx writes: > Hi, > > On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote: > >> We need to put some extra informations (simple strings) into the >> certificates (e.g. year of birth, ...). >> I have looked around the internet, but don't really find any usefull stuff. > > define a

Re: Add extra informations to certs

2009-03-31 Thread Dirk Reske
li...@kaiser.cx schrieb: > Hi, > > On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote: > > >> We need to put some extra informations (simple strings) into the >> certificates (e.g. year of birth, ...). >> I have looked around the internet, but don't really find any usefull stuff. >>

Re: Add extra informations to certs

2009-03-31 Thread lists
Hi, On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote: > We need to put some extra informations (simple strings) into the > certificates (e.g. year of birth, ...). > I have looked around the internet, but don't really find any usefull stuff. define a private extension. See RFC3280, sect

RE: Add extra informations to certs

2009-03-31 Thread Rene Hollan
A private X509v3 extension, perhaps? -Original Message- From: owner-openssl-us...@openssl.org on behalf of Dirk Reske Sent: Tue 3/31/2009 8:29 AM To: openssl-users@openssl.org Subject: Add extra informations to certs Hello, We need to put some extra informations (simple strings) into t