...you can't, without re-signing the certificate. (changing the certificate data invalidates the signed hash.)
However, if you want to, you can use openssl x509 -x509toreq -in currentcert.pem -out currentcert.req . Then, create a new configuration template file with the information you want to rewrite, and then run it through x509 req -in currentcert.req -out newcert.req. Send newcert.req to your certifying authority for signing. -Kyle H On 2/8/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > How can I rewrite some field in X509 extension and than > save whole certificate with this change to file? > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]