On Tue, Sep 26, 2006, Antonio A wrote:

> dear Marco,
> 
> how could i insert certificate policies in a
> certificate? using openssl 0.9.7 
> 
> like your certificate 
> 
> ...
> 
>              X509v3 Certificate Policies: 
>                  Policy: 2.16.840.1.113733.1.7.1.1
>                    CPS: https://www.verisign.com/CPS
>                    User Notice:
>                      Organization: VeriSign, Inc.
>                      Number: 1
>                      Explicit Text: VeriSign's CPS
>  incorp. by reference liab. ltd. (c)97 VeriSign
> ...
> 

I'm not Marco but I can answer that :-)

You need to edit the config file to add the appropriate extension. See the
fine manual at:

http://www.openssl.org/docs/apps/x509v3_config.html

although the "bleeding edge" 0.9.9 docs are on the website the options for
certificate policies are unchanged since 0.9.7. The other manual pages
describe which section of the config file to change.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to