Tal Mozes wrote:
>
> Hi,
>
> I think in order to import a certificate with a friendly name you should
> convert the X509 cert into a PKCS#7 one. You can then import the CERT.P7C
> file to IE. I never really tried that, so I looked now and found no way to
> convert to a PKCS#7 with the openssl utility. If there really no command
> line way to do the conversion, it doesn't seem too complicated to write a
> short program that does that.
>
The crl2pkc7 program can do that but there's no standard place in the
PKCS#7 structure for the actual certificates friendlyName. It may build
one from the subject Name but it can't AFAICS be explicitly defined.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
