Hi, In 0.9.6d, the qcStatement oid is already recognized.
If I put the qcStatement in req section, then it goes in the subject of the cetificate, and I don't want that. I want it to be a regular x509 v3 extension. I can do this with qcStatements = DER:XX:XX:XX:XX... in [user_cert] section, which I use by the '-extensions user_cert' command line parameter, where XX are hexadecimal values, but then I must provide my statement in DER format, and this is not very "user-friendly" for me, and I am not very sure about the exact form that the statement must have... ----- Original Message ----- From: "Averroes" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 06, 2002 3:06 PM Subject: Re: qcStatements > Hi Jasmin, > > Yes, > > put in the oid section: > > qcStatements = 1.3.6.1.5.5.7.1.3 > > then in req section as commonName, countryName, etc. > > Regards > > > Jasmin Djipanov wrote: > > > Does anyone know how to configure openssl.cnf to include the 'qcStatements' > > extension in a user certificate? > > > > Thanks... > > > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List [EMAIL PROTECTED] > > Automated List Manager [EMAIL PROTECTED] > > #------ > Averroes > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]