>> What is the new_oids section supposed to be used for? Because it looks >> like I just add a name=oid and then for simple strings, add the >> extension as name=<whatever> the man pages refer to this as well. That >> is my confusion. >> > > That should work but it wont result in "name" being displayed on things like > browsers: only OpenSSL will now about the mapping between name and the > OID.Thanks again, Dr. Henson.
Ok, so to add an extension to a certificate so that the human name "fooname" will be displayed in a browser or by openssl x509 command, I need to write some routines to encode the name and what-not. And that is explained in doc/openssl.txt in the source tree? Do you, by you, I mean anyone on the list, think having the human readable name in the certificate is a requirement? Oil ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]