On Wed, Nov 10, 2004, ray v wrote: > I wish to add something like > > 1.3.6.1.4.1.9999.1 to the Distinguished name > something like... > > CN=Me,O=FOO,OU=Bar,1.3.6.1.4.1.9999.1=stuff > > What's the best way to do this when you need to > specify the -extfile option? Or is it really necessary > to use the -extfile ? >
Extfile is for certificate extensions. If you want to add DN components you need to add those to the appropriate section where they will be prompted for when a certificate request is made. This is in the section req_distinguished_name in the standard openssl configuration file. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]