Hi all, please can someone tell me, how can I write $SUBJ with openssl 0.9.7? (I had no success to compile development version 0.9.8 on windoze.) DER coded extension with UPN I can generate in perl with no problem.
I can sign certificate with one subject alternative name in it using receipt in config: [ usr_cert ] subjectAltName=email:[EMAIL PROTECTED] or subjectAltName=DER:30:1B:A0:19:06:0A:2B:06:01:04:01:82:37:14:02:03:A0:0B:0C:09:7A:69:74:6F:40:69:2E:63:7A but I need these together at one time! subjectAltName=email:[EMAIL PROTECTED],DER:30:1B:A0:19:06:0A:2B:06:01:04:01:82:37:14:02:03:A0:0B:0C:09:7A:69:74:6F:40:69:2E:63:7A Ends with: Error Loading extension section usr_cert 8189:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:329:group=CA_default name=email_in_dn 8189:error:22075075:X509 V3 routines:v2i_GENERAL_NAME:unsupported option:v3_alt.c:436:name=DER 8189:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in extension:v3_conf.c:92:name=subjectAltName, value=email:[EMAIL PROTECTED],DER:30:1B:A0:19:06:0A:2B:06:01:04:01:82:37:14:02:03:A0:0B:0C:09:7A:69:74:6F:40:69:2E:63:7A I have no idea, how to write DER encoding in extra section: [EMAIL PROTECTED] [altname] ???=DER:... [EMAIL PROTECTED] Is this hacked extension possible at all with openssl 0.9.7 throught config file? Thanks -- Zito ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
