On Sat, May 31, 2003, Kikuyo Nagamatsu wrote: > Hello all, > > Date: Fri, 2 May 2003 14:12:59 +0200 > Dr. Stephen Henson wrote: > >However based on that encoding it looks like the correct syntax for the ASN1 > >form of otherName is: > > > >subjectAltName=otherName:2.5.5.5;UTF8:2.16.528.1.1003.1.4.3.4.2.1-0.1.2.3.4 > > > >Steve. > > I'm trying on openssl_SNAP0529, and above syntax works good. > But I want to know how to write UTF8 string by DER encoding. >
Do you want the actual DER encoding of the UTF8String or the whole extension? If you want to enter that into a previous version of OpenSSL as a string beginning "DER:" you'll need the whole extension. If its just UTF8 then the OpenSSL asn1parse utility in 0.9.8 can do that. If you want the whole extension you can extract it using the asn1parse utility, hexdump the result and paste that into the config file. If the string you want isn't fixed then things are a bit trickier and you'll have to generate the encoding somehow, for example OpenSSL 0.9.8 ASN1parse, a short program or manually. Steve. -- Dr Stephen N. Henson. Core developer of the OpenSSL project: http://www.openssl.org/ Freelance consultant see: http://www.drh-consultancy.demon.co.uk/ Email: [EMAIL PROTECTED], PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
