Hi,

In 0.9.6d, the qcStatement oid is already recognized.

If I put the qcStatement in req section, then it goes in the subject of the
cetificate, and I don't want that. I want it to be a regular x509 v3
extension.

I can do this with

qcStatements = DER:XX:XX:XX:XX...

in [user_cert] section, which I use by the '-extensions user_cert' command
line parameter, where XX are hexadecimal values, but then I must provide my
statement in DER format, and this is not very "user-friendly" for me, and I
am not very sure about the exact form that the statement must have...


----- Original Message -----
From: "Averroes" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, June 06, 2002 3:06 PM
Subject: Re: qcStatements


> Hi Jasmin,
>
> Yes,
>
> put in the oid section:
>
> qcStatements    = 1.3.6.1.5.5.7.1.3
>
> then in req section as commonName, countryName, etc.
>
> Regards
>
>
> Jasmin Djipanov wrote:
>
> > Does anyone know how to configure openssl.cnf to include the
'qcStatements'
> > extension in a user certificate?
> >
> > Thanks...
> >
> > ______________________________________________________________________
> > OpenSSL Project                                 http://www.openssl.org
> > User Support Mailing List                    [EMAIL PROTECTED]
> > Automated List Manager                           [EMAIL PROTECTED]
>
> #------
> Averroes
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to