RE: Certificate with custom fields

2009-07-11 Thread David Schwartz
Akos Vandra wrote: > The parties involved here are not connected to the internet, and thus > don't have any access to a (this is an embedded project), and they > must confirm eachother's identity based on the CA-signed certificates. If they can get each other's certificates, they can get any in

RE: Certificate with custom fields

2009-07-11 Thread PMHager
on will use the certificate unless you mark your extension as non critical. _ From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Akos Vandra Sent: Friday, July 10, 2009 10:05 PM To: openssl-users@openssl.org Subject: Certificate with custom fiel

Re: Certificate with custom fields

2009-07-10 Thread Patrick Patterson
Akos Vandra wrote: > Thank you, this was much more helpful. > > 2009/7/10 Victor Duchovni : >> On Fri, Jul 10, 2009 at 11:11:48PM +0200, Akos Vandra wrote: >> The parties involved here are not connected to the internet, and thus don't have any access to a (this is an embedded project),

Re: Certificate with custom fields

2009-07-10 Thread Victor Duchovni
On Fri, Jul 10, 2009 at 11:50:33PM +0200, Akos Vandra wrote: > > If the subject participates in a protocol in which the certificate > > authenticates its private key, generally a unique identifier for > > each subject is sufficient to support per-subject ACLs, ... > > > > If this is something akin

Re: Certificate with custom fields

2009-07-10 Thread Akos Vandra
Thank you, this was much more helpful. 2009/7/10 Victor Duchovni : > On Fri, Jul 10, 2009 at 11:11:48PM +0200, Akos Vandra wrote: > >> > The parties involved here are not connected to the internet, and thus >> > don't have any access to a  (this is an embedded project), and they >> > must confirm

Re: Certificate with custom fields

2009-07-10 Thread Victor Duchovni
On Fri, Jul 10, 2009 at 11:11:48PM +0200, Akos Vandra wrote: > > The parties involved here are not connected to the internet, and thus > > don't have any access to a  (this is an embedded project), and they > > must confirm eachother's identity based on the CA-signed certificates. Well, my addres

Re: Certificate with custom fields

2009-07-10 Thread Peter Sylvester
Victor Duchovni wrote: On Fri, Jul 10, 2009 at 10:04:45PM +0200, Akos Vandra wrote: Hello! I need to issue a few certificates with custom fields, with the customers more thoroughly identified, including Full name, Address, Telephone number, blablabla, and even a picture of the poor guy.

Re: Certificate with custom fields

2009-07-10 Thread Akos Vandra
to a central database, that is 2009/7/10 Akos Vandra : > Before just criticizing anything without any arguments whatsoever, > just stating that something is wrong, please think for a while. > Critiques are very important too, but if you do decide to criticize > something, make it useful. > > T

Re: Certificate with custom fields

2009-07-10 Thread Akos Vandra
Before just criticizing anything without any arguments whatsoever, just stating that something is wrong, please think for a while. Critiques are very important too, but if you do decide to criticize something, make it useful. The parties involved here are not connected to the internet, and thus do

Re: Certificate with custom fields

2009-07-10 Thread Victor Duchovni
On Fri, Jul 10, 2009 at 10:04:45PM +0200, Akos Vandra wrote: > Hello! > > I need to issue a few certificates with custom fields, with the > customers more thoroughly identified, including Full name, Address, > Telephone number, blablabla, and even a picture of the poor guy. A certificate is not

Certificate with custom fields

2009-07-10 Thread Akos Vandra
Hello! I need to issue a few certificates with custom fields, with the customers more thoroughly identified, including Full name, Address, Telephone number, blablabla, and even a picture of the poor guy. Can this be done with one of the standards which uses openssl, or would I have to make one of