Hi,
We're trying to develop our own Microsoft compatible certificate authority using the OpenSSL implementation ... for Domain Controller certificates Microsoft requires that the Domain Controller GUID of the Domain Controller be stored in the 'Subject Alternative Name' extension of the X.509 certificate ... I can't seem to figure out how to define that extension in the config file for the certificate generation ... can anybody help ??
using 0.9.8-dev:
... [EMAIL PROTECTED] ...
[ altname_sec ] otherName=1.3.6.1.4.1.311.25.1;FORMAT:HEX,OCT:23831111111111FB772F94 DNS=VPN-Gateway.TestLab.TrustCenter.de
where the octets represents the GUID
Nils
PS: This type of questions should be posted to [EMAIL PROTECTED]
and not to [EMAIL PROTECTED]______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
