Java开发网 - for x.509 certificate

Topic: for x.509 certificate

1.for x.509 certificate	Copy to clipboard
Posted by: lping9188 Posted on: 2003-04-08 16:13 由于业务系统的需要，能否在X.509格式的证书（或其扩展）中，加入其它的一些用户信息？能否提供一些相关的资料？先谢谢了

2.Re:for x.509 certificate [Re: lping9188]	Copy to clipboard
Posted by: menzy Posted on: 2003-04-09 07:46 你需要加如何种信息？首先，如果需要扩展，‘必须X509v3格式其次，MerchantData私用扩展可以满足部分需要但是，我觉得你所提是的用户信息不应当放再证书里面，而是应当放在application中控制

3.Re:for x.509 certificate [Re: menzy]

Copy to clipboard

Posted by: floater
Posted on: 2003-04-10 03:42

menzy wrote:
你需要加如何种信息？
首先，如果需要扩展，‘必须X509v3格式
其次，MerchantData私用扩展可以满足部分需要
但是，我觉得你所提是的用户信息不应当放再证书里面，而是应当放在application中控制

agreed! If it's not cert related, put it somewhere else, e.g., db, and hook it with the DN name in the cert.

4.Re:for x.509 certificate [Re: lping9188]

Copy to clipboard

Posted by: lping9188
Posted on: 2003-04-10 05:43

谢谢版主的回复。
我的本意是能不能产生一个商品证书，不仅有公钥等信息，还包括商品的一些属性，而这些属性值放在证书里的原因，有两点：
1、希望该属性值能够得到权威机构（如CA）的确认；
2、网上其它用户通过证书也能得到属性值。
这只是我不成熟的想法，
不知可不可行，还望指教
谢谢

5.Re:for x.509 certificate [Re: lping9188]	Copy to clipboard
Posted by: floater Posted on: 2003-04-10 11:32 I don't think you can do this at least in here, because there is a legal document associated with this CA. I don't know the details about legal stuff, but I know it's a huge issue, I forgot the word for it(damn!) but it did drag me for several months. Besides, I don't feel right about this idea, bundling the product info, nay.

6.Re:for x.509 certificate [Re: lping9188]	Copy to clipboard
Posted by: menzy Posted on: 2003-04-10 15:47 目前不可能，尤其是需要通过CA这一关。为什么有这种需求呢？

7.Re:for x.509 certificate [Re: lping9188]	Copy to clipboard
Posted by: lping9188 Posted on: 2003-04-10 16:23 目前参与一个安全数据交换的协议的设计，这个协议有一些假定，我仅是想将一些假定正确的数据”放”到证书里去，从而交易的双方都知道，来实现假定。顺便问一下，有无类似证书的数据结构，如果没有，只能设计一个类罗？谢谢

8.Re:for x.509 certificate [Re: lping9188]	Copy to clipboard
Posted by: floater Posted on: 2003-04-10 22:30 There is a X509 class in java.

9.Re:for x.509 certificate [Re: lping9188]	Copy to clipboard
Posted by: menzy Posted on: 2003-04-11 13:27 X509 class cannot fit in your requirements

10.Re:for x.509 certificate [Re: lping9188]	Copy to clipboard
Posted by: lping9188 Posted on: 2003-04-14 21:41 Thanks a lot! I'll solve this problem by other means.