Yuan Yuan wrote: > > Is there someone have experience to creat X.509 V3 Extension field for > Windows XP use? > > seems if not provide these field, windowxp will not recognize the > certificate as a valid one. > > any idea is welcome,thanks >
Do you have an example of such a certificate XP does consider valid? If the extension has a static value (not different for each user) then you could feed the DER encoded version into the config file. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Gemplus: http://www.gemplus.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]