Hi,
I'm trying to figure out how to add x509v3 extensions
using the openssl x509 utility. The man page mentions
that the -extfile can be used to specify extensions to
be used by a certificate. Looking at the code, it looks
like it parses this as a normal conf file, looking in
the "extensions" subsection. I couldnt find information
about what settings should go in this section in either
the x509 or the config man pages. I would like to
know how to mark a certificate as being an x509v3
CA. I would also like to know if it is possible to
add extensions such as:
X509v3 extensions:
X509v3 Subject Alternative Name: critical
IP Address:1.2.3.4
without writing custom code.
Tim N.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
