Hello,
We need to put some extra informations (simple strings) into the
certificates (e.g. year of birth, ...).
I have looked around the internet, but don't really find any usefull stuff.
So, do you have some links or hints where to start?
How to read out this extra informations?
Thanks from
A private X509v3 extension, perhaps?
-Original Message-
From: owner-openssl-us...@openssl.org on behalf of Dirk Reske
Sent: Tue 3/31/2009 8:29 AM
To: openssl-users@openssl.org
Subject: Add extra informations to certs
Hello,
We need to put some extra informations (simple strings
Hi,
On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote:
We need to put some extra informations (simple strings) into the
certificates (e.g. year of birth, ...).
I have looked around the internet, but don't really find any usefull stuff.
define a private extension. See RFC3280,
li...@kaiser.cx schrieb:
Hi,
On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote:
We need to put some extra informations (simple strings) into the
certificates (e.g. year of birth, ...).
I have looked around the internet, but don't really find any usefull stuff.
define a
li...@kaiser.cx writes:
Hi,
On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote:
We need to put some extra informations (simple strings) into the
certificates (e.g. year of birth, ...).
I have looked around the internet, but don't really find any usefull stuff.
define a private
Hi Dirk:
Dirk Reske wrote:
li...@kaiser.cx schrieb:
Hi,
On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote:
We need to put some extra informations (simple strings) into the
certificates (e.g. year of birth, ...).
I have looked around the internet, but don't really find any
Patrick Patterson schrieb:
Hi Dirk:
Dirk Reske wrote:
li...@kaiser.cx schrieb:
Hi,
On Tue, Mar 31, 2009 at 05:29:15PM +0200, Dirk Reske wrote:
We need to put some extra informations (simple strings) into the
certificates (e.g. year of
Hi Dirk:
Dirk Reske wrote:
Patrick Patterson schrieb:
Second,
it's just plain bad PKI to put attributes in Identity Certificates.
What do you mean with this?
Well, to quote IETF RFC3281 (which has to do with Attribute Certificates):
Some people constantly confuse PKCs and ACs.
On Tue, Mar 31, 2009 at 1:56 PM, Dirk Reske d...@devhost.de wrote:
Second,
it's just plain bad PKI to put attributes in Identity Certificates.
What do you mean with this?
Placing additional attributes in the Identity Certificates makes those
attributes available to everyone who can read
Patrick Patterson schrieb:
Hi Dirk:
Dirk Reske wrote:
Patrick Patterson schrieb:
Second,
it's just plain bad PKI to put attributes in Identity Certificates.
What do you mean with this?
Well, to
Kyle Hamilton schrieb:
On Tue, Mar 31, 2009 at 1:56 PM, Dirk Reske d...@devhost.de wrote:
Second,
it's just plain bad PKI to put attributes in Identity Certificates.
What do you mean with this?
Placing additional attributes in the Identity Certificates makes those
attributes
On Tue, Mar 31, 2009 at 2:18 PM, Dirk Reske d...@devhost.de wrote:
Yes, we know about the security issues with the extended private data.
But this is no commercial project, but a case study at our university.
Dirk
Alright.
(If any university in the US tried to do anything like this they'd be
12 matches
Mail list logo
