[Openca-Users] Problems with additional attributes

[Juan Carlos Lillo Molina]

Hello...
I need new attributes to "subjectAltName"

I use the following lines in pub.conf

DN_TYPE_BASIC_SUBJECTALTNAMES   "otherName" "email"

DN_TYPE_BASIC_SUBJECTALTNAME_1  "RUT"
DN_TYPE_BASIC_SUBJECTALTNAME_1_MINIMUM_LENGTH 12
DN_TYPE_BASIC_SUBJECTALTNAME_1_REQUIRED    "YES"

DN_TYPE_BASIC_SUBJECTALTNAME_2  "E-Mail"
DN_TYPE_BASIC_SUBJECTALTNAME_2_MINIMUM_LENGTH 3
DN_TYPE_BASIC_SUBJECTALTNAME_2_REQUIRED    "YES"

If i swap "otherName"  by  "DNS"... there is no problems with the  certificate generation, but with "otherName"  the result is this:

      Error 6761
            Error General Error while issuing Certificate to Juan Carlos Lillo Molina1 (filename: /usr/local/OpenCA/var/tmp/1A.req).


            OpenCA::OpenSSL returns errocode 7731075 (OpenCA::OpenSSL->issueCert: OpenSSL fails (7777067). Using configuration from /usr/local/OpenCA/etc/openssl/openssl/User.conf
            Check that the request matches the signature
            Signature ok
            ERROR: adding extensions in section default
            23292:error:22075075:X509 V3 routines:v2i_GENERAL_NAME:unsupported option:v3_alt.c:436:name= otherName.0
            23292:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in extension:v3_conf.c:92:name=subjectAltName, [EMAIL PROTECTED]
            error in ca
            ).


In the openssl documentation talk about the  "otherName" features, but don't work with openca...

Please, help me with any hint...

--
Atte.
JCLM