I want to add the Admission Extension to my Certificate. Therefor i use the Tool XCA, which uses OpenSSL to create the certificates.
This is my structre i wrote with some dummy Data:
1.3.36.8.3.3=ASN1:SEQUENCE:seq_sect
[seq_sect]
admissionAuthority=IMPLICIT:1,IA5STRING:MyGeneralName
contentsOfAdmissions=SEQUENCE:admissions_sect
[admissions_sect]
admissionAuthority=EXPLICIT:0,IMPLICIT:1,IA5STRING:MyGeneralNameAdmission
namingAuthority=EXPLICIT:1,SEQUENCE:namingAuthorithy_sect
professionInfos=SEQUENCE:professionInfo_sect
[professionInfo_sect]
namingAuthority=EXPLICIT:0,SEQUENCE:namingAuthorithy_sect
professionItems=UTF8String:String1,UTF8String:String2
professionOIDs=SEQUENCE:oid_sect
registrationNumber=PRINTABLESTRING:registrationNumber
addProfessionInfo=OCTETSTRING:ProffessionInfo
[oid_sect]
one=OID:1.2.3.4
two=OID:1.2.3.5
[namingAuthorithy_sect]
namingAuthorityId=OID:1.2.3.4
namingAuthorityUrl=IA5STRING:http://www.url.de
namingAuthorithyText=UTF8String:namingAuthorityTEXT
But it is not right. First Error i got ist here:
admissionAuthority=EXPLICIT:0, IMPLICIT:1,IA5STRING:MyGeneralNameAdmission
There the Tagging did not match. But don't know why. In the Definition of the Admission Syntax i have to tagg it EPLICIT but the GERNERALNAME must be tagged IMPLICIT, but i got an error. so where is the problem?
The next error is here:
professionItems=UTF8String:String1,UTF8String:String2
PROFESSIONITEM is a SEQUENCE of DIRECTORYSTRING, but when i read in the Certificate with BouncyCastle in Java i got DERUTF8STRING Exception, so here must a mistake by me, maybe i definied it false? hope anyone could help.