search

pyca / pyopenssl

A Python wrapper around the OpenSSL library
https://pyopenssl.org/
Apache License 2.0
889 stars 421 forks source link

custom oid for signing algorithm #1035

Closed sinu closed 3 years ago

sinu commented 3 years ago

is it possible to use custom OIDs for signing algorithms in openssl , i have uploaded a sample certificate which is using a custom private oid and this oid is mapped with ed25519ph. how this is possible using openssl, is there any other ca which is supporting this custom method?

image

reaperhulk commented 3 years ago

pyOpenSSL and cryptography do not directly support this, no. You can, of course, build your own ASN.1 structures, sign the hash using cryptography, and embed whatever OIDs you want, but that requires a good working understanding of the DER ASN.1 that makes up X509 certificates.