"Qin, Xiangping" <[EMAIL PROTECTED]> writes:
>I wish to add some image or voice to the certificate.
>Can you give me some advice on how to do it?
Just define an OID and put it in the altName as an otherName. I did this
about a year ago for the MPEG-of-cat certificate, which you can get from
http://www.cs.auckland.ac.nz/~pgut001/pubs/dave.der, with the CA cert at
http://www.cs.auckland.ac.nz/~pgut001/pubs/dave_ca.der. I was pleasantly
surprised to see that neither Netscape nor MSIE crashed when fed this cert,
NT didn't bluescreen, and no smoke came from my hard drive.
That covers the "how", now the "why": It doesn't make any sense to do this
because nothing will be able to handle it (unless you write the code for it
yourself). If it's for a specialised application (or to make a point and for
a laugh, which is what the MPEG cert was intended for) then it's OK, but you
wouldn't in general want to do this - if you're putting data like this in a
cert then it's a sign that there's something wrong in the overall design.
Peter.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
