On Thu, Aug 05, 2004, Craig Gleadall wrote: > I guess I should have re-read the RFC (again)... :-( Sorry everybody.... > > Extension ::= SEQUENCE { > extnID OBJECT IDENTIFIER, > critical BOOLEAN DEFAULT FALSE, > extnValue OCTET STRING } > > > IE did display the extnValue as expected then. I thought that the > extention would appear in a similar format as with validity. > > The second question then relates to suplying this extension information, > to either the P10 request or the X509 entensions. As it stands right > now I edited the openssl.cnf file to include this data - can I do this > from the command line when calling 'openssl req' or 'openssl ca' >
No you can't directly on the command line. You can use an environment variable though and expand that in the config file. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]