Richard Browne wrote:
>
> Is it possible to use openssl to add authorityInfoAccess extensions when
> signing a certificate? If so... how?
>
Yes, syntax is:
authorityInfoAccess= OID1;type, OID2;type
where 'type' has the same syntax as subjectAltName for example
authorityInfoAccess = OCSP;URI:http://some/ocsp/url
authorityInfoAccess = caIssuers;URI:http://some/ca/uri.html
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
