Setting Issuer Alternative Name

[Viktor Dukhovni]

On Thu, May 11, 2023 at 11:26:25AM -0400, Robert Moskowitz wrote:

> In rfc5280:
> 
>     IssuerAltName ::= GeneralNames
> 
>     GeneralNames ::= SEQUENCE SIZE (1..MAX) OF GeneralName
> 
>     GeneralName ::= CHOICE {
>          otherName                       [0]     OtherName,
>          rfc822Name                      [1]     IA5String,
>          dNSName                         [2]     IA5String,
>          x400Address                     [3]     ORAddress,
>          directoryName                   [4]     Name,
>          ediPartyName                    [5]     EDIPartyName,
>          uniformResourceIdentifier       [6]     IA5String,
>          iPAddress                       [7]     OCTET STRING,
>          registeredID                    [8]     OBJECT IDENTIFIER }
> 
> So since I want a DET as IssuerAltName (e.g. 
> 20010030000000052aeb9adc1ce8b1ecO), it seems that iPAddress is the only 
> thing that works.  So in the config file, I tried:

No, you would use "otherName", which is a combination of an OID and
corresponding data.  You would register (if there isn't one already) a
suitable OID for DET-values, and choose a suitable DET encoding to go
with that OID.

-- 
    Viktor.