Re: Problem to encode a ASN.1 field in SAN of a CSR

2011-03-01 Thread David CARELLA
Thank you. Note: the content on the help page is wrong. The correct content would be: - [subject_alt_section] URI=ldap://somehost.com/CN=foo,OU=bar - Not: - [subject_alt_section] subjectAltName=URI:ldap://somehost.com/CN=foo,OU=bar - Best rega

Re: Problem to encode a ASN.1 field in SAN of a CSR

2011-03-01 Thread Dr. Stephen Henson
On Tue, Mar 01, 2011, David CARELLA wrote: > > File test-req.cnf: > [ req ] > default_md = sha256 > req_extensions = ext_server > [ ext_server ] > keyUsage= critical, digitalSignature, keyEncipherment > extendedKeyUsage= serverAuth > #- MS GUID (OID:

Problem to encode a ASN.1 field in SAN of a CSR

2011-03-01 Thread David CARELLA
Hi, I try to put a field MS GUID in a SubjectAltName (SAN) extension of a CSR. This field MS GUID must contain 16 hexadecimal-octets. I used OpenSSL 1.0.0d compiled on GNU/Linux (Kubuntu). And I try with OpenSSL 0.9.8g (issued by the distribution)... and I have the same error. My test. Fi