Dear Steve - Can this be found in the latest tarball?
Any (short) instructions for use? I have looked in the latest 0.9.7d tarball and could not find this. Regards, Andy > --- "Dr. Stephen Henson" <[EMAIL PROTECTED] wrote: > > > > > On Wed, Mar 31, 2004, eiji wrote: > > > > > > > Hi > > > > > > > > I'm trying to build the private certificate > > > authority for openssl0.9.7c. > > > > > > > > I want to put a 'privateKeyUsagePeriod' > extension > > > into a sub-ca. > > > > However, the following errors will be > displayed > at > > > the time of openssl > > > > command execution. > > > > > > > > openssl x509 -req -in csr/subca.csr -CA > > > certs/root.crt -CAkey > > > > private/root.key -CAcreateserial -extfile > > > openssl.cnf -extensions > > > > usr_cert -out certs/subca.crt > > > > > > > > Error Loading extension section usr_cert > > > > 28749:error:2206B067:X509 V3 > > > routines:X509V3_EXT_conf:extension setting > > > > not > > > > supported:v3_conf.c:162:name=privateKeyUsagePeriod > > > > 28749:error:2206B080:X509 V3 > > > routines:X509V3_EXT_conf:error in > > > > > extension:v3_conf.c:92:name=privateKeyUsagePeriod, > > > value=notBefore,notAfter > > > > > > > > > > > > openssl.cnf: > > > > > > > > [ usr_cert ] > > > > > > > > subjectKeyIdentifier=hash > > > > keyUsage = critical,Certificate Sign, CRL Sign > > > > basicConstraints = critical,CA:true, pathlen:0 > > > > authorityKeyIdentifier=issuer:always > > > > privateKeyUsagePeriod = notBefore,notAfter > > > > > > > > > > > > Please teach me how to put in this extension. > > > > > > > > > > Like the error message says, extension setting > is > > > not supported. > > > The usage of privateKeyUsage period is strongly > > > discouraged in RFC3280. > > > > > > If you *really* need it there are ways round > that > > > though using the mini-ASN1 > > > compiler in 0.9.8-dev. > > > > > > Steve. > > > -- > > > Dr Stephen N. Henson. Email, S/MIME and PGP > keys: > > > see homepage > > > OpenSSL project core developer and freelance > > > consultant. > > > Funding needed! Details on homepage. > > > Homepage: http://www.drh-consultancy.demon.co.uk > > > > ______________________________________________________________________ > > > OpenSSL Project > > > http://www.openssl.org > > > User Support Mailing List > > > [EMAIL PROTECTED] > > > Automated List Manager > > > [EMAIL PROTECTED] > > > > > > > > > > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
