[openssl-users] How to add CT Precertificate SCTs to a server certificate?

[Salz, Rich]

> How do we use `openssl req` and a CONF file to add the information
> (assuming we already have the certified timestamps)?

Ouch, that's gonna be nasty.  Look at ASN1_generate_nconf.pod  Most likely have to use the SEQUENCE type, recursively.  Ouch indeed.

A patch to let you specify the DER directly would be useful.

--  
Senior Architect, Akamai Technologies
IM: richsalz at jabber.at Twitter: RichSalz