[Mono-bugs] [Bug 77156][Wis] Changed - many X509Extension derived classes cannot be encoded

[bugzilla-daemon at bugzilla.ximian.com]

Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by sebastien at ximian.com.

http://bugzilla.ximian.com/show_bug.cgi?id=77156

--- shadow/77156	2006-01-04 09:56:01.000000000 -0500
+++ shadow/77156.tmp.29739	2006-01-04 11:52:48.000000000 -0500
@@ -1,26 +1,53 @@
 Bug#: 77156
 Product: Mono: Class Libraries
-Version: unspecified
-OS: 
+Version: 1.1
+OS: All
 OS Details: 
 Status: NEW   
 Resolution: 
-Severity: 
-Priority: Blocker
+Severity: Unknown
+Priority: Wishlist
 Component: Mono.Security
 AssignedTo: sebastien at ximian.com                            
 ReportedBy: khe at kmd.dk               
 QAContact: mono-bugs at ximian.com
 TargetMilestone: ---
 URL: 
 Cc: 
-Summary: X509Extensions... can't use them for building a certificate
+Summary: many X509Extension derived classes cannot be encoded
 
 I just discovered more problems with the extensions and 
 X509CertificateBuilder.
 I have to add SubjectKeyIdentifierExtension and 
 AuthorityKeyIdentifierExtension, but the properties for >>writing<< the 
 keyId is either missing or read-only.
 
 I also have to add a CertificatePoliciesExtension. I haven't looked at it 
 yet, but I suspect that I will run into the same problems here.
+
+------- Additional Comments From sebastien at ximian.com  2006-01-04 11:52 -------
+Right now only the extensions required for Mono's makecert tool have
+encoding capabilities. 
+
+This means that:
+* AuthorityKeyIdentifierExtension;
+* CertificatePoliciesExtension;
+* CRLDistributionPointsExtension;
+* KeyAttributeExtension;
+* NetscapeCertTypeExtension;
+* PrivateKeyUsagePeriodExtension;
+* SubjectAltNameExtension; and
+* SubjectKeyIdentifierExtension
+only implement decoding [*],
+
+while
+* BasicConstaintsExtension;
+* ExtendedKeyUsageExtension; and
+* KeyUsageExtension
+implements both decoding and encoding.
+
+[*] Also note that some extensions are only *partially* decoded.
+
+Some of them will (probably) be updated when I complete Pkcs* in
+System.Security.dll for 2.0 support - or if they are required
+elsewhere in Mono. Contributions are welcomed!