Thread Previous • Date Previous • Date Next • Thread Next |
On 10:39 am, philip.kershaw@xxxxxxxxxx wrote:
Hi all,I'd like to find out if pyOpenSSL supports the addition of arbitrary certificate extensions. I see here that you can add extensions:http://stackoverflow.com/questions/7279282/extract-the-value-of-a-x-509 -certificate-custom-extension-using-pyopenssl
As you discovered, only some extensions are supported. To support arbitrary extensions, more "APIs" from OpenSSL will need to be exposed. This is probably possible, and only a matter of someone doing the work.
I'm copying pyopenssl-users@xxxxxxxxxxxxxxxxxxx on this reply. Please prefer the Launchpad mailing list for future correspondence. Thanks.
Jean-Paul
But if I try this I get:from OpenSSL import crypto ext = crypto.X509Extension('1.2.3.4', 0, 'myextension')Traceback (most recent call last): File "<stdin>", line 1, in <module>OpenSSL.crypto.Error: [('X509 V3 routines', 'DO_EXT_NCONF', 'unknown extension name'), ('X509 V3 routines', 'X509V3_EXT_nconf', 'error in extension')]If it is not currently possible is there some means that the relevant OpenSSL API calls needed could be exposed through pyOpenSSL?Thanks, Phil
Thread Previous • Date Previous • Date Next • Thread Next |