Dear Dr. Stephen,
thanks for your answer :o)

i am using OpenSSL 0.9.7 API to generate a
certificate, so i would like to know if i have to edit
openssl config file in order to use the certificate
policies estension.

i appreciate all help you could give me.

best regards.

antonio araujo



 --- "Dr. Stephen Henson" <[EMAIL PROTECTED]>
escribió:

> On Tue, Sep 26, 2006, Antonio A wrote:
> 
> > dear Marco,
> > 
> > how could i insert certificate policies in a
> > certificate? using openssl 0.9.7 
> > 
> > like your certificate 
> > 
> > ...
> > 
> >              X509v3 Certificate Policies: 
> >                  Policy: 2.16.840.1.113733.1.7.1.1
> >                    CPS:
> https://www.verisign.com/CPS
> >                    User Notice:
> >                      Organization: VeriSign, Inc.
> >                      Number: 1
> >                      Explicit Text: VeriSign's CPS
> >  incorp. by reference liab. ltd. (c)97 VeriSign
> > ...
> > 
> 
> I'm not Marco but I can answer that :-)
> 
> You need to edit the config file to add the
> appropriate extension. See the
> fine manual at:
> 
> http://www.openssl.org/docs/apps/x509v3_config.html
> 
> although the "bleeding edge" 0.9.9 docs are on the
> website the options for
> certificate policies are unchanged since 0.9.7. The
> other manual pages
> describe which section of the config file to change.
> 
> Steve.
> --
> Dr Stephen N. Henson. Email, S/MIME and PGP keys:
> see homepage
> OpenSSL project core developer and freelance
> consultant.
> Funding needed! Details on homepage.
> Homepage: http://www.drh-consultancy.demon.co.uk
>
______________________________________________________________________
> OpenSSL Project                                
> http://www.openssl.org
> User Support Mailing List                   
> openssl-users@openssl.org
> Automated List Manager                          
> [EMAIL PROTECTED]
> 


__________________________________________________
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis! 
Regístrate ya - http://correo.espanol.yahoo.com/ 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to