Arnaud De Timmerman wrote:
>
> hi,
>
> Now I have this in my pkcs12 info :
> *******************
> subject=/C=FR/ST=Nord/O=Certi/CN=dsfdsfqfds/Email=sqdfdqsfqdsfdsqf/1.6=4444
> *******************
>
> I'd like (for instance) to have "EXT" instead of "1.6". How can I do that since
> when I change my [ new_oids ] section, openssl say :
> *************************
> problem creating object ext=EXT
> 23522:error:0D064077:asn1 encoding routines:a2d_ASN1_OBJECT:first num too
> large:a_object.c:104:
> *************************
> "Email" doesn't begin with a number...
>
The actual names displayed are registered names.
All that appears in the certificate is the numerical version (well its
DER representation to be precise). Its OpenSSL that translates the
numerical form to its more readable name.
Email for example is actually 1.2.840.113549.1.9.1
You can add your own unofficial versions to crypto/objects/objects.h,
but it will still appear as the numericial form to an unmodified version
of OpenSSL.
It is not advisable to make something up. You can apply for your own
subtree at
http://www.isi.edu/cgi-bin/iana/enterprise.pl
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
