Problem adding extensions to a certificate

[Arthur Wongtschowski]

Using the following code, I manage to add a lot of extensions to a
certificate. 


        X509V3_EXT_METHOD *method;
        STACK_OF(CONF_VALUE) *nval;
        int ext_len;
        unsigned char *ext_der;
        void *ext_struc;
        int ext_nid;
        ASN1_OCTET_STRING *ext_oct;
        X509_EXTENSION *ext;

        ext_nid = OBJ_sn2nid(name);

        method = X509V3_EXT_get_nid(ext_nid);
        nval = X509V3_parse_list(value);

        if(method->v2i)
                ext_struc = method->v2i(method, NULL, nval);
        else if(method->s2i)
                ext_struc = method->s2i(method, NULL, value);
        else if(method->r2i)
                ext_struc = method->r2i(method, NULL, value);

        ext_len = method->i2d(ext_struc, NULL);
        ext_der = (unsigned char *)OPENSSL_malloc(ext_len);
        p = ext_der;
        method->i2d(ext_struc, &p);

        ext_oct = M_ASN1_OCTET_STRING_new();
        ext_oct->data = ext_der;
        ext_oct->length = ext_len;

        ext = X509_EXTENSION_create_by_NID(NULL, ext_nid, 0, ext_oct);
        M_ASN1_OCTET_STRING_free(ext_oct);

        X509_add_ext(cert, ext, -1);

, where "cert" is of type X509. This code works form the folowing values of
the variables "name" and "value"

name = "keyUsage", value = "nonRepudiation, digitalSignature,
keyEncipherment";

name = "crlDistributionPoints", value = "URI:http://myserver/CRL.asp";

name = "extendedKeyUsage", value = "serverAuth, emailProtection"

  The problem is : I'm not being able to add the "authorityKeyIdentifier"
extension. Does any one knows what the value for the variable "value" whould
be in this case ? I would really apreciate some help... Thanks !

> ----------------------
> Arthur Wongtschowski
> SCOPUS Tecnologia S.A.
> Seguran�a de Sistemas
> Fone : 55 11 3909-3479
> [EMAIL PROTECTED]
> 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]