I'll answer several messages at once in this mail.

Nils Larsch <[EMAIL PROTECTED]> wrote:

> Try:
> 
> [EMAIL PROTECTED]
> 
> [dist_point]
> dirName=dir_name
> 
> [dir_name]
> C=FI
> O=SSH Communications Security Corp
> CN=SSH Test CA 2 No Liabilities
> 
> this works for me (note: I'm using 0.9.8-dev).

Indeed, this works for me too. I checked the relevant code in the
snapshot from 20031105 and it's apparently been rewritten to handle
dirNames.

Kiyoshi Watanabe <[EMAIL PROTECTED]> wrote:

> Sorry, I did not mention that I used the patch from Oliver King a few
> years back in openssl dev mailing list. Please search the patch in the
> archive. 

I guess this patch also adds support for dirName type attributes?
Regardless, support for it appears to be in the snapshot I'm using.

When I reported that Kiyoshi's suggestion didn't work, I quoted this
from my config:

crlDistributionPoints = @crl_dist
[ crl_dist ] 
DirName = /C=FI/O=SSH Communications Security Corp/CN=SSH Test CA
2 No Liabilities

and Peter Sylvester <[EMAIL PROTECTED]> pointed out: 
> The string is "dirName" not "DirName"

I went back and tried again, and it didn't work either way. With the
snapshot and Nils's suggested syntax, I must indeed use "dirName", not
"DirName". Thanks for the tip.

I appreciate the help, all. One step closer to security :)

-- 
| Mike Acar | [EMAIL PROTECTED] |
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to