In message <[EMAIL PROTECTED]> on Mon, 12 Feb 2007 11:34:22 +0100, "Michael Leuchtner" <[EMAIL PROTECTED]> said:
mleuchtner> The request to the MS CA needs the "enroll certtype extension" (OID mleuchtner> 1.3.6.1.4.1.311.20.2) where I put the name of the certificate template mleuchtner> in. mleuchtner> I've already put the extension in the right place using mleuchtner> X509_EXTENSION_create_by_NID(), sk_X509_EXTENSION_push() and mleuchtner> X509_REQ_add_extensions_nid(). mleuchtner> Now the problem is, that the value is inserted as an OCTET STING. But I mleuchtner> want to set it as an BMPSTRING. What ever I tried - the value always mleuchtner> comes as octet string in my request. The problem seems to be, that the mleuchtner> Extension structure only takes octet strings, so I think, that the mleuchtner> bmpstring has to set as some kind of subfield?! mleuchtner> mleuchtner> Can anybody tell me how to set an BMPSTRING in my extension? The way X.509 extensions work, the whole structure of the value resides in that OCTET STRING. What you need to figure out is the structure of the value and how to populate it. This may mean that you have to ask Microsoft. Cheers, Richard ----- Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ "When I became a man I put away childish things, including the fear of childishness and the desire to be very grown up." -- C.S. Lewis ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
