Lines Matching refs:extension
5 x509v3_config - X509 V3 certificate extension configuration format
20 Each entry in the extension section takes the form:
24 If B<critical> is present then the extension will be marked as critical.
26 If multiple entries are processed for the same extension name,
31 There are four main types of extension:
59 If an extension is multi-value and a field value must contain a comma the long
96 the extension but should be documened.
97 See L</Certificate Policies> for an example of a raw extension.
99 If an extension type is unsupported, then the I<arbitrary> extension syntax
104 The following sections describe the syntax of each supported extension.
105 They do not define the semantics of the extension.
109 This is a multi-valued extension which indicates whether a certificate is
124 or omit the extension entirely.
131 Key usage is a multi-valued extension consisting of a list of names of
144 This extension consists of a list of values indicating purposes for which
175 The SKID extension specification has a value with three choices.
176 If the value is the word B<none> then no SKID extension will be included.
191 The AKID extension specification may have the value B<none>
221 This is a multi-valued extension that supports several types of name
234 the extension.
278 This extension supports most of the options of subject alternative name;
289 This extension gives details about how to retrieve information that
309 This is a multi-valued extension whose values can be either a name-value
313 When a name-value pair is used, a DistributionPoint extension will
370 This extension should only appear in CRLs. It is a multi-valued extension
372 points extension. The following names have meaning:
411 This is a I<raw> extension that supports all of the defined fields of the
412 certificate extension.
465 This is a multi-valued extension which consisting of the names
475 This is a string extension whose value must be a non negative integer.
483 This is a multi-valued extension. The name should
500 This is a string extension. It is parsed, but ignored.
508 This is a multi-valued extension consisting of a list of TLS extension
510 When a TLS client sends a listed extension, the TLS server is expected to
511 include that extension in its reply.
526 Netscape Comment (B<nsComment>) is a string extension containing a comment
544 If an extension is not supported by the OpenSSL code then it must be encoded
545 using the arbitrary extension format. It is also possible to use the arbitrary
547 the data is formatted correctly for the given extension type.
551 The first way is to use the word ASN1 followed by the extension content
564 extension.
569 The value following DER is a hex dump of the DER encoding of the extension
570 Any extension can be placed in this form to override the default behaviour.
578 extension. It may therefore be sometimes possible to use certificates for