Security Forums
Log in
FAQ
| Search
| Usergroups
| Profile
| Register
| RSS
| Posting Guidelines
| Recent Posts
View previous topic :: View next topic
Author
Message
harshanahnd Just Arrived Joined: 18 Apr 2009 Posts: 0
Posted: Tue Apr 21, 2009 12:23 pm Post subject: How to add x509v3 extensions?
Hi,
I want to add a x509v3 extension so that after generating a certificate I should have the following in my extensions section,
Identifier: Basic Constraints - 2.5.29.19
critical: yes
Is CA:yes
I am using Protect Server Gold HSM to generate my keys. There I should give a extension file at the time of generating keys. Example for that is,
keyusage
{
keyCertSign,
noncritical
}
This will result the following extensions,
Identifier : Key Usage: - 2.5.29.32
Critical: no
KeyUsage:
Key CertSign
This extension adding was successfully created. But I am finding it difficult to have the above mentioned Basic Constraints extension. Please help
Thanks...
Back to top
Fire Ant Trusted SF Member Joined: 27 Jun 2008 Posts: 3 Location: London
Posted: Tue Apr 21, 2009 2:06 pm Post subject:
What CA software are you using?
Back to top
harshanahnd Just Arrived Joined: 18 Apr 2009 Posts: 0
Posted: Tue Apr 21, 2009 4:12 pm Post subject:
Protect Toolkit C that came with Protect Server Gold HSM
Back to top
Fire Ant Trusted SF Member Joined: 27 Jun 2008 Posts: 3 Location: London
Posted: Tue Apr 21, 2009 4:33 pm Post subject:
First off, it doesn't even sound like a CA product. Secondly, I searched the Internet and its not a CA at all. I think you are confused, its a development toolkit used for creating applications that work with the HSM.
OpenSSL
RSA Keon
Entrust
Microsoft CA
These are all CA products.
Matt_s
Back to top
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum