adding certificate extensions using JSS

[Gobind Bansal]

Hi,

I am trying to add the subjectAltName and subjectDirectoryAttribute to a
org.mozilla.jss.pkix.cert.CertificateInfo object. However, after I add, I
don't the values correctly

for subjectAltName:

            OBJECT_IDENTIFIER subAltNameOid =
                    new OBJECT_IDENTIFIER(new long[]{2, 5, 29, 17});

            IA5String emailAddress = new IA5String("[EMAIL PROTECTED]");
            SEQUENCE sanSeq = new SEQUENCE();
            org.mozilla.jss.pkix.primitive.Name subAltNameValue =
                    new org.mozilla.jss.pkix.primitive.Name();
            ava = new AVA(new OBJECT_IDENTIFIER("1.2.840.113549.1.9.1"),
emailAddress);
            subAltNameValue.addElement(ava);

            sanSeq.addElement(subAltNameValue);
            OCTET_STRING subAltNameString = new
OCTET_STRING(ASN1Util.encode(sanSeq));
            pkixCertinfo.addExtension(new Extension(subAltNameOid, false,
subAltNameString));

I have tried this without using SEQUENCE.. but it does not help.

I have tried adding keyUsage and basicConstraints and they work fine.

Any help would be appreciated. Would be great if there is some sample code
to add various extensions.

Thanks,
Gobind Bansal



_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto