[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    Re: How to get XEnroll to create a private key of type
From:       Dr Stephen Henson <drh () CELOCOM ! COM>
Date:       1999-08-26 16:19:53
[Download RAW message or body]


Peter Persits wrote:
> 
> Hi all,
> 
> I am using XEnroll to create ceritifcate requests. I noticed that createPKCS10 \
> always creates private keys of the type AT_SIGNATURE no matter what the Usage \
> parameter is. As a results, certificates created and enrolled do not show up in IE4 \
> under Content/Personal (IE5 shows them just fine.) How do I get XEnroll to create \
> an AT_KEYEXCHANGE private key? Is there a specific Usage parameter? 

Setting the KeySpec property to 1 should work.

The usage parameter is used for something else: it adds the OID as an
extended key usage extension in the resulting PKCS#10 request but
otherwise has no effect AFAIK.

Steve.
--
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: shenson@drh-consultancy.demon.co.uk
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: drh@celocom.com PGP key: via homepage.

----------------------------------------------------------------
Users Guide http://msdn.microsoft.com/workshop/essentials/mail.asp
contains important info including how to unsubscribe.  Save time, search
the archives at http://discuss.microsoft.com/archives/index.html


[prev in list] [next in list] [prev in thread] [next in thread]