On Thu, Nov 22, 2007, Frans de Boer wrote: > > RFC3280 is already dated, why has openssl not implemented this? I am not > the first one to ask, but the first to get a workable answer. for that, > many thanks. >
OpenSSL doesn't include every OID in existence especially those which it may not have any use for. Several mechanisms exist to add custom OIDs to OpenSSL so even if an OID doesn't have a human readable name it can still be used. Occasionally we miss one of the more common ones and they get added when it is brought to our attention. This is the first time I've seen anyone mention the lack of caRepository in OpenSSL. I'll add the OID so OpenSSL will understand the text format in future versions. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]