Re: [Ejbca-develop] Problem Aquiring Value for Custom Certificate Extensions

[Tomas G. <tom...@pr...>]

If you want to feed a dynamic certificate extension value to an end entity you can do that through the Extended Information field. You can pass that in the UI (enable "Custom certificate extension data" in the EE profile).

There is an example in the docs:
https://doc.primekey.com/ejbca/ejbca-operations/ejbca-ca-concept-guide/certificate-profiles-overview/custom-certificate-extensions

If you run "clientToolBox EjbcaWsRaCli edtuser" the heptext will also show an example I believe.

Cheers,
Tomas
________________________________
From: Christian Felsing via Ejbca-develop <ejb...@li...>
Sent: Wednesday, December 29, 2021 12:17 PM
To: Ejbca-develop <ejb...@li...>
Cc: Christian Felsing <pu...@fe...>
Subject: [Ejbca-develop] Problem Aquiring Value for Custom Certificate Extensions

CAUTION: External Sender - Be cautious when clicking links or opening attachments. Please email In...@ke... with any questions.


Hello,

in EJBCA 7.4.3.2 Community, in "System Configuration" -> "Custom
Certificate Extensions" an OID 1.3.6.1.4.1.311.25.1 was created with
following parameters:

Label: msADGUID
Extension Class: Basic Certificate Extension
Critical: False
Required: True
Dynamic: True
Encoding: DEROCTETSTRING
Value: <not set>

was created. In "Certificate Profile" it is possible to select this in
"Used Custom Certificate Extension", but I found no way to aquire value
for that attribute from either certificate-/entity-profie or CSR.

Is there any way to get values for Custom Certificate Extensions from
EJBCA forms or CSR?

Christian


_______________________________________________
Ejbca-develop mailing list
Ejb...@li...
https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fejbca-develop&amp;data=04%7C01%7Ctomas.gustavsson%40primekey.com%7Cbd41dbe2bd1346167c8208d9cabf97f7%7Cc9ed4b459f70418aaa58f04c80848ca9%7C0%7C0%7C637763747524638851%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=kqAY5VaZpPpEt73iv3CBHk7MtHFgfRl40G1gMK2S1II%3D&amp;reserved=0