On Fri, Jun 04, 2010, jeff wrote: > I tried the following and it created more interesting results. > It now fails on the good certificate -- the one that matches the > nameConstraint. > The error it returns is: > error 34 at 1 depth lookup:unhandled critical extension >
Are you using OpenSSL 0.9.8? Name constraints can be created in 0.9.8 but are not processed. You need 1.0.0 to process name constraints. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
