Hi everybody,

I have some problems with X509 extensions. First of all, what I want to do:

I want to define new extensions, simply some new extension fields that I
want to fill with values.

I thought, I just define them in an array:

  struct entry ext_entries[3] =
  {
    {"basicConstraints","CA:FALSE"},
    {"authorityKeyIdentifier","keyid,issuer:always"},
    {"myOwnExtension","myValue"}
  };

Those are the extensions for a non CA certificate. The CA certificate
has only the first two, but not the third. When I execute

ext=X509V3_EXT_conf(NULL,&ctx,ext_entries[i].key,ext_entries[i].value)

I get an error for myOwnExtension "unknown extension name". I tried to
add it to openssl.cnf under [usr_cert], but that didn't fix it. Where
and how do I have to define new extensions? That should be possible,
shouldn't it?

Thanks in advance
Regards
Carolin
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to