Jorge wrote:
>
> Hello all,
> I'm trying to include an URL to a CRL in my client certificates. My clients
> use both netscape and explorer, so I can't use nsRevocationUrl. I've already
> checked documentation, and found that the extension I must use is
> CRLDistributionPoints (OID:2.5.29.31).
> My problem is that I can't make it work. If I insert a line in openssl.cnf
> like crlDistPoints = http://... I get the following error message:
> 27841:error:2207C082:X509 V3 routines:DO_EXT_CONF:unknown extension
> name:v3_conf
> .c:121:
> 27841:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in
> extension:v3_conf
> .c:91:name=crlDistPoints, value=http://www.foo.bar/cgi-bin/rev.cgi
>
> How can I make it work?
>
If you read the FAQ you'd see it mentions documentation in
doc/openssl.txt. This documentation includes examples of the use of this
extension.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
