This is a discussion on Re: adding purpose to certificate - Openssl ; On Wed, Sep 27, 2006, Antonio A wrote: > Dear Dr. Stephen, > thanks for your answer ) > > i am using OpenSSL 0.9.7 API to generate a > certificate, so i would like to know if i have ...
On Wed, Sep 27, 2006, Antonio A wrote:
> Dear Dr. Stephen,
> thanks for your answer )
> i am using OpenSSL 0.9.7 API to generate a
> certificate, so i would like to know if i have to edit
> openssl config file in order to use the certificate
> policies estension.
> i appreciate all help you could give me.
If you are using the API as opposed to the command line utilities you need to
use the X509V3 API. This is currently described in doc/openssl.txt.
If you want to set certificate policies from a config file then you need to
edit whichever file you use to match the extension values. Alternatively you
can set up the structure manually and use the X509V3 API to encode and add the
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
OpenSSL Project http://www.openssl.org
User Support Mailing List email@example.com
Automated List Manager firstname.lastname@example.org