Thanks for the reply ...
We're using the Eric Young OpenSSL library 0.9.7c available on the openssl.org site ... they don't have the version 0.9.8 implementation ... its a bit late in our project to switch to another implementation ... could i get a patch or something to make this thing work ?
Thanks again.
Peter.
From: Nils Larsch <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: Domain GUID in X.509 Date: Thu, 26 Feb 2004 20:44:49 +0100
Surrealistic Dreamer wrote:Hi,
We're trying to develop our own Microsoft compatible certificate authority using the OpenSSL implementation ... for Domain Controller certificates Microsoft requires that the Domain Controller GUID of the Domain Controller be stored in the 'Subject Alternative Name' extension of the X.509 certificate ... I can't seem to figure out how to define that extension in the config file for the certificate generation ... can anybody help ??
using 0.9.8-dev:
... [EMAIL PROTECTED] ...
[ altname_sec ] otherName=1.3.6.1.4.1.311.25.1;FORMAT:HEX,OCT:23831111111111FB772F94 DNS=VPN-Gateway.TestLab.TrustCenter.de
where the octets represents the GUID
Nils
PS: This type of questions should be posted to [EMAIL PROTECTED] and not to [EMAIL PROTECTED]
______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
_________________________________________________________________ Take a break! Find destinations on MSN Travel. http://www.msn.com.sg/travel/
______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
