On Thu, Feb 10, 2005, Oliver Leischner wrote: > Hello everybody, > i try to create an certificate request with some additional attributes. One > of those attributes is subjectAltName with a dirName. But the request > generation failed with the following error: > > Error Loading request extension section v3_req > 11382:error:22075075:X509 V3 routines:v2i_GENERAL_NAME:unsupported > option:v3_alt.c:437:name=dirName > 11382:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in > extension:v3_conf.c:92:name=subjectAltName, value=dirName:dir_sect > > I'm a little bit confused, because the openssl documentation provide > information about configuring directory names in the subjectAltName > (http://www.openssl.org/docs/apps/x509v3_config.html#Subject_Alternative_Name_). > > Furthermore i found a posting (from Dr. Stephen N. > Henson) in the User Support Mailing List from the 07 Oct 2003, in that > exactly this problem was stated as solved (in version 0.9.8-dev???). > http://www.mail-archive.com/openssl-users@openssl.org/msg33108.html > > However. It dosn't work! I grep'ed throught the sources and find a part of > the appropiate code which handles the dirName attribute (e.g. in > crypto/x509v3/v3_alt.c). In this file the dirName was never handled. > > Does openssl support the subjectAltName = dirName:dir_sec attribute? Or did > i make some other mistakes? > >
So did you try 0.9.8-dev or are you using 0.9.7 which doesn't support it? 0.9.8-dev can be obtained from the snapshots directory: ftp://ftp.openssl.org/snapshot/ Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
