topic extended key usage extension in Wireless

extended key usage extension

maller — Sun, 04 Jul 2021 16:52:28 GMT

I'm trying to generate server certificates and client certificates with extended key usage (EKU)(openssl) but I can't add it to the certificate. The EKU is necessary in order to specify server authentication usage or client authentication usage.

I´ve tried to modify my openssl.cnf file but without success.

Does anybody know how to do it?

thanks

Re: extended key usage extension

sbilgi — Thu, 12 Aug 2004 13:02:02 GMT

I think IOS may not be able to understand the EKU.

Re: extended key usage extension

michaelr — Fri, 13 Aug 2004 01:20:03 GMT

IOS understands the EKU. It is ignored unless the extension is marked critical. The reason I have been given for this is that there is no accepted standard for the contents of the extension so IOS wouldn't know what to accept or reject.

I have read some messages on IETF mailing lists which tend to indicate that use of EKU is discouraged in IKE. It may be used in other cases, though.

michael