Hello, I have tried to use the genstr option,but haven't been successful :(.
Could you please tell me the format of the command. openssl asn1parse -genstr "subjectAltName=otherName:1.3.6.1.4.1.311.20.2.3;UTF8:test@test.com" Thanks in advance. nabil -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nils Larsch Sent: Friday, July 08, 2005 2:16 PM To: openssl-users@openssl.org Subject: Re: Certificate for Smart Card Logon Nabil Ghadiali wrote: > Hello, > > I am trying to generate a certificate to be used for Windows Smart > Card > Logon from my Internal Certificate Server. I know that I need the UPN in > the otherName of the SubjectAltName extension. The OID for the UPN is > 1.3.6.1.4.1.311.20.2.3. > > My Certificate Server however will allow me only to provide this > extension in the form of a base-64 encoded blob at the time of the > certificate request. Can openssl be used to generate just this extension > in this format? should be possible using the "openssl asn1parse -genstr ..." option (see manpage). Note: you need openssl >= 0.9.8 for this. Nils ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]