Re: Increment certificate serial numbers randomly

2014-04-29 Thread Nikolay Elenkov
On Wed, Apr 30, 2014 at 6:59 AM, Michael Wojcik wrote: > All of these approaches have already been suggested in this thread. Is it > really necessary that we go through them again? > > What hasn't been suggested is giving each server, etc. its own sub-CA signed by the root. Then there won't be a

attribute certificate in PKCS#7 (CMS)

2005-11-22 Thread Nikolay Elenkov
Hello, I am trying to patch the PKCS#7 code to (partially) handle CMS ver 3. What I need is to parse a CMS structure that has an attribute certificate in the certificates field of SignedData. The relevant defintions from RFC 2630 are: SignedData ::= SEQUENCE { version CMSVersion,

Re: attribute certificate in PKCS#7 (CMS)

2005-11-23 Thread Nikolay Elenkov
Nikolay Elenkov wrote: > I am trying to patch the PKCS#7 code to (partially) handle CMS ver 3. > What I need is to parse a CMS structure that has an attribute > certificate in the certificates field of SignedData. > ... > > typedef struct certificate_choices_st { >