Hello...
I need new attributes to "subjectAltName"

I use the following lines in pub.conf

DN_TYPE_BASIC_SUBJECTALTNAMES   "otherName" "email"

DN_TYPE_BASIC_SUBJECTALTNAME_1  "RUT"
DN_TYPE_BASIC_SUBJECTALTNAME_1_MINIMUM_LENGTH 12
DN_TYPE_BASIC_SUBJECTALTNAME_1_REQUIRED    "YES"

DN_TYPE_BASIC_SUBJECTALTNAME_2  "E-Mail"
DN_TYPE_BASIC_SUBJECTALTNAME_2_MINIMUM_LENGTH 3
DN_TYPE_BASIC_SUBJECTALTNAME_2_REQUIRED    "YES"

If i swap "otherName"  by  "DNS"... there is no problems with the  certificate generation, but with "otherName"  the result is this:

    Error 6761

      Error General Error while issuing Certificate to Juan Carlos Lillo Molina1 (filename: /usr/local/OpenCA/var/tmp/1A.req).


      OpenCA::OpenSSL returns errocode 7731075 (OpenCA::OpenSSL->issueCert: OpenSSL fails (7777067). Using configuration from /usr/local/OpenCA/etc/openssl/openssl/User.conf
      Check that the request matches the signature
      Signature ok
      ERROR: adding extensions in section default
      23292:error:22075075:X509 V3 routines:v2i_GENERAL_NAME:unsupported option:v3_alt.c:436:name=otherName.0
      23292:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in extension:v3_conf.c:92:name=subjectAltName, [EMAIL PROTECTED]
      error in ca
      ).


In the openssl documentation talk about the  "otherName" features, but don't work with openca...

Please, help me with any hint...


--
Atte.
JCLM

Reply via email to