473,396 Members | 1,933 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,396 software developers and data experts.

Enabling (PHP5) OpenSSL extensions when signing a certificate

I have been trying to enable/use specific OpenSSL extensions that I use in
generating certificates manually, via PHP5 + php5-openssl
module/extension.

Filling out the "configargs" array with 'x509_extensions' and/or
'req_extensions' fails to generate/sign a certificate with the desired
X.509 extensions included in the signed certificate. The extensions in my
"openssl.cnf" file work just fine with manual OpenSSL commands.

Also, I am not sure that the "configargs" array method of specifying an
OpenSSL configuration file works properly. I have looked at the openssl.c
code, and see that the signing code appears to use the certificate request
extension, rather than a "regular" extension specification, thereby
ignoring the 'x509_extension' argument. Actually, I find the entirety of
the openssl.c code to be very confusing, but that is besides the point.

SO - I want to be able to use OpenSSL extensions, via PHP5-OpenSSL, of ANY
type as I can with manual OpenSSL commands (or modified CA.sh scripts)
where the REQ or CA commands accept a "-extensions" parameter, but I
haven't been able to get this to work yet.
Jul 17 '05 #1
0 2703

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
by: Robin H. Johnson | last post by:
Hi, I'm working on a project making large use of OpenSSL to individually encrypt items inside a database, but I've hit a stumbling block. There appears to be absolutely no native PHP way (eg...
0
by: John Douglass | last post by:
I'm running php 5.03 and attempting to use the openssl_csr_sign() function Everything works great except for the configargs optional array Prototype is: openssl_csr_sign ( mixed csr, mixed...
0
by: John Bergstrom | last post by:
Hello everyone! I wrote a simple perl program to encrypt a string using Crypt::OpenSSL::RSA. Everything as described in the module documentation. The public key is a valid X.509 encrypted...
1
by: Martin | last post by:
I have a couple of questions around code signing with MS technology: 1. Is there a way to transfer the generated strong name signing private key directly to a smartcard (or generate it on the...
8
by: Lenn | last post by:
Hello, I've been struggling with this for couple of days now. All I want to do is to enable SSL protocol on the webserver. I want to be able to generate and sign my own certificates. I used...
0
by: bozzzza | last post by:
I have installed PHP, and the OPENSSL extension. The phpinfo() page confirms it is working : OpenSSL support enabled OpenSSL Version OpenSSL 0.9.8a 11 Oct 2005 I am using PHP Version 5.1.1...
4
by: Chuck Anderson | last post by:
I am trying to install Php5 on my WindowsXP machine (at home, not on the 'net). I downloaded the Php Windows binary at php.net, unzipped it to c:/Php5, changed my Apache config file to use Php5...
0
by: seanovision | last post by:
Hi, I've been wrestling with this for a few days and I'm not sure what I'm doing wrong. I'm writing a script that will eventually sign several certificate signing requests (CSRs) using openssl....
3
by: Marcin Jurczuk | last post by:
Hello, I'm fighting with Certificate Authority functionality with python I stuck on following problem: How to sign CSR using CA key and write resulted certificate. You can do it using following...
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
0
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.