1 Topic by JhihPing

(1 replies, posted in wolfSSL)

Hi,

When I use "test.c" to generate a CA, the .PEM files doesn't have "Subject Key Identifier" and "Authority Key Identifier" options in extensions.

And I trace the code to discover below:
EncodeCert(...) in asn.c:

   /* CA */
    if (cert->isCA) {
        der->caSz = SetCa(der->ca);
        if (der->caSz == 0)
            return CA_TRUE_E;
    }
    else
        der->caSz = 0;

    /* extensions, just CA now */
    if (cert->isCA) {
        der->extensionsSz = SetExtensions(der->extensions,
                                          der->ca, der->caSz, TRUE);
        if (der->extensionsSz == 0)
            return EXTENSIONS_E;
    }
    else
        der->extensionsSz = 0;

I can't find about this feature. I want to generate a CA that is similar with "ca-cert.pem" and "server-cert.pem". Could you help me how to make a CA with "Subject Key Identifier" and "Authority Key Identifier" options?

Thanks.

BR,
JhihPing

Go to forum: wolfSSL