Re: How to set my custom information in certificate

2007-07-13 Thread Ian jonhson
Hi, I built a test code to fetch the custom information from X509_add_ext(). The test codes are as following: codes for fetching extension static char *get_distribution_point(X509 *cert) { int extcount, i, j; const char*extstr; CONF_V

Re: How to set my custom information in certificate

2007-07-12 Thread Ian jonhson
No. Once the certificate has been signed it's done. If you want to change anything you have to resign (recreate) it. OK, then how to fetch the custom information? Is it same as the sketch but using X509_get_ext()? __ OpenSSL

Re: How to set my custom information in certificate

2007-07-12 Thread Jim Fox
Thanks. But it seems that I must add my custom information as extension when the certificate is being created. Can I add to the certificate which has already been created ? No. Once the certificate has been signed it's done. If you want to change anything you have to resign (recreate) it. Ji

Re: How to set my custom information in certificate

2007-07-12 Thread Ian jonhson
> If I want to do this job by standard openssl API, how to accomplish this/ A rough sketch would be: // set up context X509V3_set_ctx(...) X509_EXTENSION *ext; // read ext information ext = X509V3_EXT_conf(...) // add extension if (!X509_add_ext(cert, ext, ...) { error output } You need to

Re: How to set my custom information in certificate

2007-07-12 Thread Feiyi Wang
You mean that I should write down my custom information in openssl.cnf, and then load the custom information to extension of proxy by openssl command, isn't it? yes If I want to do this job by standard openssl API, how to accomplish this/ A rough sketch would be: // set up context X509V3_s

Re: How to set my custom information in certificate

2007-07-11 Thread Ian jonhson
Yes, you can add custom extension info through configuring openssl.cnf and with right openssl command. You mean that I should write down my custom information in openssl.cnf, and then load the custom information to extension of proxy by openssl command, isn't it? If I want to do this job by s

Re: How to set my custom information in certificate

2007-07-11 Thread Feiyi Wang
Yes, you can add custom extension info through configuring openssl.cnf and with right openssl command. Feiyi On 7/5/07, Ian jonhson <[EMAIL PROTECTED]> wrote: Hi all, Did anyone try to set some custom information in certificate? For example, if I want to set a simple string, "This is my proxy

How to set my custom information in certificate

2007-07-05 Thread Ian jonhson
Hi all, Did anyone try to set some custom information in certificate? For example, if I want to set a simple string, "This is my proxy", in certificate, what shall I do? Can it be implemented by standard openssl command? I tried to set the custom information in extension section, however it did