You mean that I should write down my custom information in openssl.cnf, and then load the custom information to extension of proxy by openssl command, isn't it?
yes
If I want to do this job by standard openssl API, how to accomplish this/
A rough sketch would be: // set up context X509V3_set_ctx(...) X509_EXTENSION *ext; // read ext information ext = X509V3_EXT_conf(...) // add extension if (!X509_add_ext(cert, ext, ...) { error output } You need to fill in data structures and details according to your app context. Feiyi
Thanks alot Best Regards, Ian ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]