From hugh.emberson at gmail.com Fri Jan 18 07:03:57 2008 From: hugh.emberson at gmail.com (Hugh Emberson) Date: Fri, 18 Jan 2008 17:03:57 +1100 Subject: [pyOpenSSL] Patch to fix examples/simple Message-ID: <359778bc0801172203p3878a5d2s9274faf744a5f975@mail.gmail.com> Hello All, I've just added a patch to the SF.net tracker which fixes the examples in examples/simple. See patch #1874366 https://sourceforge.net/tracker/?func=detail&atid=401760&aid=1874366&group_id=31249 Regards, Hugh From sebvieira at gmail.com Tue Jan 29 12:02:31 2008 From: sebvieira at gmail.com (Sebastian Vieira) Date: Tue, 29 Jan 2008 12:02:31 +0100 Subject: [pyOpenSSL] unable to add X509 extension Message-ID: <279239c70801290302p112ca817ha6ebfb1be38fb1fe@mail.gmail.com> Hi, (i really hope this list is still somewhat active) Let me say that i'm totally new to python, so please excuse me for that :) I have modified the simple example script somewhat to have it generate a client certificate, signed by an existing CA certificate. Now all works up to the point that i want to add an X509 extension. The 'Basic Constraints' extension works fine, but when i add another (or replace it) like this: extensions.append(crypto.X509Extension('basicConstraints',1, 'CA:true')) extensions.append(crypto.X509Extension('nsComment', 0, 'OpenSSL Generated Certificate')) cert.add_extensions(extensions) i get this error: ValueError: Can't initialize exception The same goes for extensions.append(crypto.X509Extension('subjectKeyIdentifier', 0, 'hash')) and authorityKeyIdentifier Am i doing something fundamentally wrong? Is this feature not implemented, or shouldn't i be using pyopenssl for this? I appreciate any feedback because so far Google hasn't been helpful. I'm using an deb package python-pyopenssl from Debian Lenny's repo. I've also tried downloading the source and patching it with the "[ 1166109 ] (re)enabling X509Extensions" patch found on the sourceforge website, but this gives me the same error. kind regards, Sebastian -------------- next part -------------- An HTML attachment was scrubbed... URL: