Stephen, Thanks. I saw it about 30 minutes ago and figured it out. The problem I was having was that creating extensions required very strict use of names and values! Once I got that it was a breeze.
Once again thanks for the heads up and a very nice package! Chuck Wegrzyn Dr. Stephen Henson wrote: > On Mon, Jun 04, 2007, Chaz. wrote: > >> I need to be able to create a v3 CA certificate via programming. I don't >> have the ability to fork a shell and invoke openssl to do the work. I >> was wondering if any one has a small program that will create the needed >> certificate. >> >> The problem that I am having is that I don't see a way to create the >> >> "Basic Constraint/cA:TRUE/pathLenConstraint:1" >> >> extension and the >> >> "KeyUsage/keyCertSign" >> >> extension. >> >> Any help would be greatly appreciated. >> > > demos/x509/mkcert.c > > Steve. > -- > Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage > OpenSSL project core developer and freelance consultant. > Funding needed! Details on homepage. > Homepage: http://www.drh-consultancy.demon.co.uk > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]