Adding subjectAltName:OtherName in cert request

Manish Patidar <[email protected]>
Newsgroups gmane.comp.encryption.openssl.user
Message-ID <CAN6ajHLDnghFdcJuyHEUYLm6+61FL2v+gPUerdDor5GaZ=cF_w@mail.gmail.com>
Hi,

I need to add the following in the certificate request.


id-ce-subjectAltName OBJECT IDENTIFIER ::= { id-ce 17 }
subjectAltName = GeneralNames
otherName [0] OtherName
OtherName ::= Sequence {

Id-on-hardwareModuleName OBJECT IDENTIFIER ::= iso(1)
identified-organization(3) dod(6)

internet(1) security(5) mechanisms(5) pkix(7) on(8) 4

HardwareModuleName ::= SEQUENCE {

hwType OBJECT IDENTIFIER

hwSerialNum OCTET STRING

}

}


I able to generate the certificate required using openSSl cmd line with
conf  where following was added in config file

[ v3_req ]
# Extensions to add to a certificate request
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
*subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:hmodname*
*[hmodname]*
*hwType = OID:1.3.6.1.4.1.47196.6.3.2.2*
*hwSerialNum = FORMAT:HEX,OCT:01020304 *



I need to do add subject alt name in certificate request using openSSL
API.( not using config file)

I have tried to use GENERAL_NAME_set0_othername , but I am not able to add
an inner sequence.

Can someone suggest how we can add  this using OpenSSL APIs

Regards
Manish
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.