...you can't, without re-signing the certificate.  (changing the
certificate data invalidates the signed hash.)

However, if you want to, you can use openssl x509 -x509toreq -in
currentcert.pem -out currentcert.req .

Then, create a new configuration template file with the information
you want to rewrite, and then run it through x509 req -in
currentcert.req -out newcert.req.  Send newcert.req to your certifying
authority for signing.

-Kyle H

On 2/8/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> How can I rewrite some field in X509 extension and than
> save whole certificate with this change to file?
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to