Alexander

> I would like to generate a pkcs-keypair with the <KEYGEN> tag for more
then
> one OU´s. 
> Is there a standard variable for the second OU available? 
> In ssleay.conf I can define 0.organizationalUnitName, 
> 1.org.. but how can I get this in a pkcs-keypair?
> Any hints on this I would really appreciate.
> 
> Alexander Geschonneck

        KEYGEN does not hold the DN in a ASN.1 structure.
        The RA/CA must be able to put more than one OU in the cert.

        PublicKeyAndChallenge ::= SEQUENCE {
            spki SubjectPublicKeyInfo,
            challenge IA5STRING
        }

        SignedPublicKeyAndChallenge ::= SEQUENCE {
            publicKeyAndChallenge PublicKeyAndChallenge,
            signatureAlgorithm AlgorithmIdentifier,
            signature BIT STRING
        }


Best Rene

+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+

Reply via email to