You mean that I should write down my custom information in
openssl.cnf, and then load the custom information to extension of
proxy by openssl command, isn't it?

yes


If I want to do this job by standard openssl API, how to accomplish this/

A rough sketch would be:

// set up context
X509V3_set_ctx(...)

X509_EXTENSION *ext;

// read ext information
ext = X509V3_EXT_conf(...)

// add extension
if (!X509_add_ext(cert, ext, ...) {
 error output
}

You need to fill in data structures and details according to your app context.

Feiyi




Thanks alot


Best Regards,

Ian
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to