Hi, all:
Right I have some problem in my certificate format. Anyone can give me a
help, it will be very appreciated.
When I use openssl -0.9.6 to create certificate the certificate look
like :
Certificate:
Data:
Version: 1 (0x0)
Serial Number: 13 (0xd)
Signature Algorithm: md5WithRSAEncryption
Issuer: CN=rootca
Validity
Not Before: Oct 12 19:59:35 2000 GMT
Not After : Feb 11 19:59:35 2025 GMT
Subject: CN=name
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:bd:7b:d6:6a:c0:c8:04:b3:46:40:c6:da:71:3f:
61:0f:6f:56:cf:3e:4b:72:78:69:b5:19:5f:e6:b9:
ab:d4:33:6b:15:4c:23:86:a2:16:c8:da:da:af:2b:
fa:6a:0a:e0:5c:d1:cc:88:3a:e1:72:c0:8b:04:80:
82:82:d6:19:ed:c5:d1:20:63:4d:f4:63:46:cb:f5:
08:ca:09:67:31:1f:34:02:d9:8d:8c:cf:61:79:de:
b6:47:8d:8b:e8:14:52:71:b3:5c:38:a5:12:ab:a0:
b1:79:21:9b:35:7e:0e:62:50:bf:38:79:cf:60:81:
34:cb:fe:c2:8c:b1:73:63:91
Exponent: 65537 (0x10001)
Signature Algorithm: md5WithRSAEncryption
03:b1:2a:74:a5:af:06:97:ee:50:93:df:ea:b5:5b:59:77:46:
64:3c:fb:9c:da:5b:83:d4:14:ff:f1:98:8d:de:6d:99:32:e8:
6b:28:d3:d1:05:b9:26:ba:9d:06:44:de:be:35:2f:b6:14:e7:
b5:19:f7:ba:2d:49:b4:2a:1d:4d:6d:2c:4b:25:8b:70:ac:f0:
8a:a3:04:61:43:b0:7f:a5:5b:00:15:05:7c:a3:62:82:80:a5:
17:9b:13:69:e8:63:6a:6e:52:ed:6f:ad:17:95:76:b0:c6:6e:
ac:ad:14:16:27:c1:82:05:d8:66:e6:cf:b8:78:03:84:65:98:
6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
But I need a certificate format look like :
issuer
:[EMAIL PROTECTED]
subject:/C=CA/ST=ON/O=nt/OU=vr22/CN=eric/Email=eric@mmm
serial :10FA
Certificate:
Data:
Version: 1 (0x0)
Serial Number: 4346 (0x10fa)
Signature Algorithm: md5WithRSAEncryption
Issuer: C=CA, ST=ON, L=ottawa, O=nortel, OU=vr22,
[EMAIL PROTECTED]
Validity
Not Before: Nov 16 23:54:55 2000 GMT
Not After : Nov 16 23:54:55 2001 GMT
Subject: C=CA, ST=ON, O=nt, OU=vr22, CN=eric/Email=eric@mmm
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (512 bit)
Modulus (512 bit):
00:9a:fb:78:e9:dd:96:a1:60:fe:c2:52:86:f2:ed:
0c:8d:33:42:09:d2:8f:bb:fa:bb:39:fc:b4:22:b1:
aa:dc:cc:dd:c8:99:74:0a:29:4d:e9:d2:16:f9:48:
66:37:92:e3:e6:87:46:0a:61:8d:44:bc:61:2b:51:
76:1b:5d:88:dd
Exponent: 65537 (0x10001)
Signature Algorithm: md5WithRSAEncryption
48:c6:2f:f2:98:56:b6:d7:bf:14:fb:9f:d6:a7:68:e5:f6:cd:
fc:38:3c:17:27:31:49:51:b1:62:42:3e:21:b4:90:f8:88:2f:
0d:a2:f3:e2:93:7c:98:59:da:e7:6b:2a:0c:f0:d6:d1:12:12:
32:c0:34:53:a1:de:4d:75:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
The different is the only first three line . The second certificate has
issuer, subject, serial number .
Could you tell me how to use openssl -0.9.6 to create certificate like
this ? Since I need put issuer, subject , serial number information at
certificate begin.
Thanks for any suggestion and help.
--
Pei Chen, Software Designer
Succession Security Network Manager Group, Nortel Networks
[EMAIL PROTECTED] | (613)768-3750 | ESN 398-3750
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]