On Wed, Sep 27, 2006, Antonio A wrote:

> Dear Dr. Stephen,
> thanks for your answer )
>
> i am using OpenSSL 0.9.7 API to generate a
> certificate, so i would like to know if i have to edit
> openssl config file in order to use the certificate
> policies estension.
>
> i appreciate all help you could give me.
>


If you are using the API as opposed to the command line utilities you need to
use the X509V3 API. This is currently described in doc/openssl.txt.

If you want to set certificate policies from a config file then you need to
edit whichever file you use to match the extension values. Alternatively you
can set up the structure manually and use the X509V3 API to encode and add the
extension.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org