On 2009-12-17 08:52 PST, Kai Chan wrote: > Nelson, > > Thank you for your response. I guess I'll take a look at the ASN.1 > encoders and decoders for how to provide that functionality. I take it > if it were to be added, it should be added to certutil.
Yes, and also to "pp", the tool that decodes and "pretty prints" most of the well known PKI BER/DER structures. I suggest you start by looking at pp. Figure out what it would take to get pp to be able to decode and print out an attribute certificate. You can see how it decodes and prints out all the other types of DER sequences that it knows. That will give you big clues. The ASN.1 encoder uses the same templates as the decoder, so when you can decode an AC, you should be easily able to encode one with the same templates. See also http://www.mozilla.org/projects/security/pki/nss/tech-notes/tn1.html -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
