How to add x509v3 extensions?

Networking/Security Forums -> Cryptographic Software and Hardware

Author: harshanahnd PostPosted: Tue Apr 21, 2009 12:23 pm    Post subject: How to add x509v3 extensions?
    ----
Hi,

I want to add a x509v3 extension so that after generating a certificate I should have the following in my extensions section,

Identifier: Basic Constraints - 2.5.29.19
critical: yes
Is CA:yes

I am using Protect Server Gold HSM to generate my keys. There I should give a extension file at the time of generating keys. Example for that is,

keyusage
{
keyCertSign,
noncritical
}

This will result the following extensions,
Identifier : Key Usage: - 2.5.29.32
Critical: no
KeyUsage:
Key CertSign

This extension adding was successfully created. But I am finding it difficult to have the above mentioned Basic Constraints extension. Please help

Thanks...

Author: Fire AntLocation: London PostPosted: Tue Apr 21, 2009 2:06 pm    Post subject:
    ----
What CA software are you using?

Author: harshanahnd PostPosted: Tue Apr 21, 2009 4:12 pm    Post subject:
    ----
Protect Toolkit C that came with Protect Server Gold HSM

Author: Fire AntLocation: London PostPosted: Tue Apr 21, 2009 4:33 pm    Post subject:
    ----
First off, it doesn't even sound like a CA product. Secondly, I searched the Internet and its not a CA at all. I think you are confused, its a development toolkit used for creating applications that work with the HSM.

OpenSSL
RSA Keon
Entrust
Microsoft CA

These are all CA products.

Matt_s



Networking/Security Forums -> Cryptographic Software and Hardware


output generated using printer-friendly topic mod, All times are GMT + 2 Hours

Page 1 of 1

Powered by phpBB 2.0.x © 2001 phpBB Group