dear Dr. Stephen,
thanks again for your help :o)
i am using the following code (C++ & Qt) to create
certificate policies extension:
x509v3ext GenExtDB::getCertPol()
{
x509v3ext ext;
//#if 0
if (!certPol->text().isEmpty()) {
ext.create(NID_certificate_policies,
certPol->text(), &ext_ctx);
}
//#endif
return ext;
}
x509v3ext &x509v3ext::create(int nid, const QString
&et, X509V3_CTX *ctx)
{
if (ext) {
X509_EXTENSION_free(ext);
ext = NULL;
}
if (!et.isEmpty()) {
ext = X509V3_EXT_conf_nid(NULL, ctx, nid, (char
*)et.latin1());
}
if (!ext) ext = X509_EXTENSION_new();
return *this;
}
when i put 1.2.3.4 (OID) in certPol->text() i always
get the following error:
error:2206B088:X509 V3 routines:X509V3_EXT_conf:no
config database
could you give some hint to find out what is wrong?
best regards
--- "Dr. Stephen Henson" <[EMAIL PROTECTED]>
escribió:
> On Wed, Sep 27, 2006, Antonio A wrote:
>
> > Dear Dr. Stephen,
> > thanks for your answer :o)
> >
> > i am using OpenSSL 0.9.7 API to generate a
> > certificate, so i would like to know if i have to
> edit
> > openssl config file in order to use the
> certificate
> > policies estension.
> >
> > i appreciate all help you could give me.
> >
>
> If you are using the API as opposed to the command
> line utilities you need to
> use the X509V3 API. This is currently described in
> doc/openssl.txt.
>
> If you want to set certificate policies from a
> config file then you need to
> edit whichever file you use to match the extension
> values. Alternatively you
> can set up the structure manually and use the X509V3
> API to encode and add the
> extension.
>
> Steve.
> --
> Dr Stephen N. Henson. Email, S/MIME and PGP keys:
> see homepage
> OpenSSL project core developer and freelance
> consultant.
> Funding needed! Details on homepage.
> Homepage: http://www.drh-consultancy.demon.co.uk
>
______________________________________________________________________
> OpenSSL Project
> http://www.openssl.org
> User Support Mailing List
> openssl-users@openssl.org
> Automated List Manager
> [EMAIL PROTECTED]
>
__________________________________________________
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ¡gratis!
Regístrate ya - http://correo.espanol.yahoo.com/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
