Gao Yuhang wrote:
>
> I have sent this mail yesterday with a false title, so I'm senfing this
> again, sorry for the spam.
>
> Hi,
> Does anyone knows how to change the EVP tags? Or is there a conf
> file to do this dynamically? The fact is that I want to change the cert
> request's tag. Many CA's now accept "-------BEGIN NEW CERTIFICATE
> REQUEST-------------" and "----------END NEW CERTIFICATE
> REQUEST------------". My users often forget to add the new when submiting
> there requests, which gives me much trouble. So, I thinks I'd better change
> it for good, but where?
>
If you are using 'req' to generate requests then there is a new -newhdr
command line option in OpenSSL 0.9.5a which automatically does this. You
could just change req so this is on by default. Now I come to think of
it it would be useful if this was a config file option too...
Otherwise there is a separate function PEM_write_bio_X509_REQ_NEW()
which behaves in the same way as PEM_write_bio_X509_REQ() except it uses
'NEW' in the headers.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
