• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

How to add x509v3 extensions?

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Cryptographic Software and Hardware

View previous topic :: View next topic  
Author Message
harshanahnd
Just Arrived
Just Arrived


Joined: 18 Apr 2009
Posts: 0


Offline

PostPosted: Tue Apr 21, 2009 12:23 pm    Post subject: How to add x509v3 extensions? Reply with quote

Hi,

I want to add a x509v3 extension so that after generating a certificate I should have the following in my extensions section,

Identifier: Basic Constraints - 2.5.29.19
critical: yes
Is CA:yes

I am using Protect Server Gold HSM to generate my keys. There I should give a extension file at the time of generating keys. Example for that is,

keyusage
{
keyCertSign,
noncritical
}

This will result the following extensions,
Identifier : Key Usage: - 2.5.29.32
Critical: no
KeyUsage:
Key CertSign

This extension adding was successfully created. But I am finding it difficult to have the above mentioned Basic Constraints extension. Please help

Thanks...
Back to top
View user's profile Send private message
Fire Ant
Trusted SF Member
Trusted SF Member


Joined: 27 Jun 2008
Posts: 3
Location: London

Offline

PostPosted: Tue Apr 21, 2009 2:06 pm    Post subject: Reply with quote

What CA software are you using?
Back to top
View user's profile Send private message
harshanahnd
Just Arrived
Just Arrived


Joined: 18 Apr 2009
Posts: 0


Offline

PostPosted: Tue Apr 21, 2009 4:12 pm    Post subject: Reply with quote

Protect Toolkit C that came with Protect Server Gold HSM
Back to top
View user's profile Send private message
Fire Ant
Trusted SF Member
Trusted SF Member


Joined: 27 Jun 2008
Posts: 3
Location: London

Offline

PostPosted: Tue Apr 21, 2009 4:33 pm    Post subject: Reply with quote

First off, it doesn't even sound like a CA product. Secondly, I searched the Internet and its not a CA at all. I think you are confused, its a development toolkit used for creating applications that work with the HSM.

OpenSSL
RSA Keon
Entrust
Microsoft CA

These are all CA products.

Matt_s
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Cryptographic Software and Hardware All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register