On Mon, Oct 13, 2003, Dr. Stephen Henson wrote: > On Mon, Oct 13, 2003, Fr�d�ric Giudicelli wrote: > > > You have several options. You can populate the structure yourself and the add > it to the certificate using X509_add_ext_i2d() then you can use whatever > syntax you want. > > Alternatively you can use the NCONF code to write your own handler and use > X509V3_EXT_nconf() instead: new code should used the nconf variants anyway. > > You'll have to do this if you want to handle more complex extensions like > CertificatePolicies or for the new functionality like the dirName forms such > as subjectAltName in 0.9.8. >
Another alternative is to create a config file in a memory BIO using the @section syntax. Steve. -- Dr Stephen N. Henson. Core developer of the OpenSSL project: http://www.openssl.org/ Freelance consultant see: http://www.drh-consultancy.demon.co.uk/ Email addresses, PGP and S/MIME: see homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
