Re: adding keyusage to a PKCS10 request in JSS - SOLVED

Thanks for the outputs Nelson, I finally got it figured out this morning. Java has no unsigned types so the digital signature bit generated an error about a possible loss of precision so I changed to using the BitSet which, to me, is a lot clearer anyway. You just "set" the bits that you want

Re: adding keyusage to a PKCS10 request in JSS

David Stutzman wrote: > I'm building the SET of Attributes now using the following code: > SET attributeSet = new SET(); > byte[] keyUsageByte = new byte[1]; > keyUsageByte[0] = 0x80 & 0x40; //digital signature and non repudiation Well, of course, 0x80 & 0x40 == 0. I think you meant 0x80 | 0x40.