x509 extension support

Previous Topic Next Topic
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
Report Content as Inappropriate

x509 extension support

Freemon Johnson

Can anyone help me in discerning which version of openssl supports sbgp-autonomousSysNum and sbgp-ipAddrBlock? If it has been deprecated then providing the alternative would be greatly appreciated.

A sample openssl.cnf is provided below. When I perform a request for req it fails because of the objects described above. The version of openssl I am using when attempting this req generation is version OpenSSL 1.0.2g  1 Mar 2016

default_bits            = 2048
default_md              = sha256
distinguished_name      = req_dn
prompt                  = no
encrypt_key             = no

CN                      = Testbed RPKI root certificate

basicConstraints        = critical,CA:true
subjectKeyIdentifier    = hash
keyUsage                = critical,keyCertSign,cRLSign
subjectInfoAccess       = @sia
certificatePolicies     = critical,
sbgp-autonomousSysNum   = critical,@rfc3779_asns
sbgp-ipAddrBlock        = critical,@rfc3997_addrs

[sia];URI  = rsync://example.org/rpki/root/;URI = rsync://example.org/rpki/root/root.mft

AS.0 = 64496-64511
AS.1 = 65536-65551

IPv4.0 =
IPv4.1 =
IPv4.2 = 
IPv6.0 = 2001:0DB8::/32


openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users