On Wed, Sep 27, 2006, Antonio A wrote: > Dear Dr. Stephen, > thanks for your answer :o) > > i am using OpenSSL 0.9.7 API to generate a > certificate, so i would like to know if i have to edit > openssl config file in order to use the certificate > policies estension. > > i appreciate all help you could give me. >
If you are using the API as opposed to the command line utilities you need to use the X509V3 API. This is currently described in doc/openssl.txt. If you want to set certificate policies from a config file then you need to edit whichever file you use to match the extension values. Alternatively you can set up the structure manually and use the X509V3 API to encode and add the extension. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
