Certreq encoding problem
Hi,I want to add the the netscape extensions in my certificate but I don't understand how to encode my values.my inf contains 2.16.840.1.113730.1.2=http://www.myurl.comI've enable this OID in my CABut when I do this, the extension is there but the text is not correctly displayed in the extension.any idea ?thks
October 9th, 2009 3:56pm

Can you post, contents of your inf file and certutil -dump (e.g. certutil -dump request.txt) of the request? However according to http://technet.microsoft.com/en-us/library/cc736326(WS.10).aspx you should encode the extension to IA5String encoded in Base64Text. I'm not sure whether it is sufficient to convert the string to base64 encoding or you need also ASN1 representation. In former case this utility will help you http://www.opinionatedgeek.com/dotnet/tools/Base64Encode/Default.aspx.In latter case OpenSSL might be useful, to encode use these two commands:openssl asn1parse -genstr IA5STRING:test -out out.binopenssl enc -base64 -in test.binHTHMartin Rublik
Free Windows Admin Tool Kit Click here and download it now
October 9th, 2009 5:19pm

In latter case OpenSSL might be useful, to encode use these two commands:openssl asn1parse -genstr IA5STRING:http://www.myurl.com -out out.binopenssl enc -base64 -in out.bin I've checked some sample request files and you need to encode the string into its ASN.1 representation. RegardsMartin
October 11th, 2009 10:59am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics