OpenSSL › OpenSSL - User

Can openssl change a V1 to a V3 x509?

_‹ Previous Topic Next Topic _›

Classic

List

Threaded

4 messages Options

David Templar

Can openssl change a V1 to a V3 x509?

I am having a lot of problems importing a certificate made in openssl
into a phone, but I can get a keytool certificate imported. The only
thing is that I need to change the V1 cert (keytool only makes V1) to a
V3 cert - can openssl modify a cert to a V3 (without changing anything
else)?
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [hidden email]
Automated List Manager [hidden email]

Joseph Oreste Bruni

Re: Can openssl change a V1 to a V3 x509?

Probably not since the certificate has been signed by its issuer. Any
changes would render the signature invalid.

On Jul 13, 2005, at 3:45 PM, David Templar wrote:

> I am having a lot of problems importing a certificate made in
> openssl into a phone, but I can get a keytool certificate imported.
> The only thing is that I need to change the V1 cert (keytool only
> makes V1) to a V3 cert - can openssl modify a cert to a V3 (without
> changing anything else)?
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [hidden email]
> Automated List Manager [hidden email]
>

smime.p7s (3K) Download Attachment

JoelKatz

RE: Can openssl change a V1 to a V3 x509?

In reply to this post by David Templar

> I am having a lot of problems importing a certificate made in openssl
> into a phone, but I can get a keytool certificate imported. The only
> thing is that I need to change the V1 cert (keytool only makes V1) to a
> V3 cert - can openssl modify a cert to a V3 (without changing anything
> else)?

Certificates, by design, cannot be modified. Whoever or whatever issued the
certificate will have to issue a new one.

DS

______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [hidden email]
Automated List Manager [hidden email]

David Templar

Re: Can openssl change a V1 to a V3 x509?

Thanks.

David Schwartz wrote:

>>I am having a lot of problems importing a certificate made in openssl
>>into a phone, but I can get a keytool certificate imported. The only
>>thing is that I need to change the V1 cert (keytool only makes V1) to a
>>V3 cert - can openssl modify a cert to a V3 (without changing anything
>>else)?
>>
>>
>
> Certificates, by design, cannot be modified. Whoever or whatever issued the
>certificate will have to issue a new one.
>
> DS
>
>
>______________________________________________________________________
>OpenSSL Project http://www.openssl.org
>User Support Mailing List [hidden email]
>Automated List Manager [hidden email]
>
>
>

______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [hidden email]
Automated List Manager [hidden email]