AutoIt Requires Chilkat v11.0.0+
AutoIt
Generate a CSR containing an Extension Request
See more CSR Examples
Demonstrates how to generate a CSR containing a 1.2.840.113549.1.9.14 extensionRequest.Chilkat AutoIt Downloads
Local $bSuccess = False
; This requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.
; This example will generate a secp256r1 ECDSA key for the CSR.
$oEcc = ObjCreate("Chilkat.Ecc")
$oPrng = ObjCreate("Chilkat.Prng")
$oPrivKey = ObjCreate("Chilkat.PrivateKey")
$bSuccess = $oEcc.GenKey("secp256r1",$oPrng,$oPrivKey)
If ($bSuccess = False) Then
ConsoleWrite("Failed to generate a new ECDSA private key." & @CRLF)
Exit
EndIf
$oCsr = ObjCreate("Chilkat.Csr")
; Add common CSR fields:
$oCsr.CommonName = "mysubdomain.mydomain.com"
$oCsr.Country = "GB"
$oCsr.State = "Yorks"
$oCsr.Locality = "York"
$oCsr.Company = "Internet Widgits Pty Ltd"
$oCsr.EmailAddress = "support@mydomain.com"
; Add the following 1.2.840.113549.1.9.14 extensionRequest
; Note: The easiest way to know the content and format of the XML to be added is to examine
; a pre-existing CSR with the same desired extensionRequest. You can use Chilkat to
; get the extensionRequest from an existing CSR.
; Here is a sample extension request:
; <?xml version="1.0" encoding="utf-8"?>
; <set>
; <sequence>
; <sequence>
; <oid>1.3.6.1.4.1.311.20.2</oid>
; <asnOctets>
; <printable>ZATCA-Code-Signing</printable>
; </asnOctets>
; </sequence>
; <sequence>
; <oid>2.5.29.17</oid>
; <asnOctets>
; <sequence>
; <contextSpecific tag="4" constructed="1">
; <sequence>
; <set>
; <sequence>
; <oid>2.5.4.4</oid>
; <utf8>334623324234325</utf8>
; </sequence>
; </set>
; <set>
; <sequence>
; <oid>0.9.2342.19200300.100.1.1</oid>
; <utf8>310122393500003</utf8>
; </sequence>
; </set>
; <set>
; <sequence>
; <oid>2.5.4.12</oid>
; <utf8>0000</utf8>
; </sequence>
; </set>
; <set>
; <sequence>
; <oid>2.5.4.26</oid>
; <utf8>Sample E</utf8>
; </sequence>
; </set>
; <set>
; <sequence>
; <oid>2.5.4.15</oid>
; <utf8>Sample Business</utf8>
; </sequence>
; </set>
; </sequence>
; </contextSpecific>
; </sequence>
; </asnOctets>
; </sequence>
; </sequence>
; </set>
; Use this online tool to generate code from sample XML:
; Generate Code to Create XML
; Here's the code to generate the above extension request.
$oXml = ObjCreate("Chilkat.Xml")
$oXml.Tag = "set"
$oXml.UpdateChildContent "sequence|sequence|oid","1.3.6.1.4.1.311.20.2"
$oXml.UpdateChildContent "sequence|sequence|asnOctets|printable","ZATCA-Code-Signing"
$oXml.UpdateChildContent "sequence|sequence[1]|oid","2.5.29.17"
$oXml.UpdateAttrAt("sequence|sequence[1]|asnOctets|sequence|contextSpecific",True,"tag","4")
$oXml.UpdateAttrAt("sequence|sequence[1]|asnOctets|sequence|contextSpecific",True,"constructed","1")
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set|sequence|oid","2.5.4.4"
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set|sequence|utf8","334623324234325"
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[1]|sequence|oid","0.9.2342.19200300.100.1.1"
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[1]|sequence|utf8","310122393500003"
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[2]|sequence|oid","2.5.4.12"
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[2]|sequence|utf8","0000"
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[3]|sequence|oid","2.5.4.26"
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[3]|sequence|utf8","Sample E"
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[4]|sequence|oid","2.5.4.15"
$oXml.UpdateChildContent "sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[4]|sequence|utf8","Sample Business"
; Add the extension request to the CSR
$oCsr.SetExtensionRequest($oXml)
; Generate the CSR with the extension request
Local $sCsrPem = $oCsr.GenCsrPem($oPrivKey)
If ($oCsr.LastMethodSuccess = False) Then
ConsoleWrite($oCsr.LastErrorText & @CRLF)
Exit
EndIf
ConsoleWrite($sCsrPem & @CRLF)
; Sample PEM output:
; -----BEGIN CERTIFICATE REQUEST-----
; MIICEjCCAbkCAQAwgZcxITAfBgNVBAMMGG15c3ViZG9tYWluLm15ZG9tYWluLmNv
; bTELMAkGA1UEBhMCR0IxDjAMBgNVBAgMBVlvcmtzMQ0wCwYDVQQHDARZb3JrMSEw
; HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxIzAhBgkqhkiG9w0BCQEW
; FHN1cHBvcnRAbXlkb21haW4uY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE
; g8EVNSV0ttlM9kG2E+J3ZB9WEDYVf2QA/8idrPRUafia1CHjd1kslwZA8eP2bAcf
; 2O493QAENqtW6DTHJbRz8KCBvjCBuwYJKoZIhvcNAQkOMYGtMIGqMCEGCSsGAQQB
; gjcUAgQUExJaQVRDQS1Db2RlLVNpZ25pbmcwgYQGA1UdEQR9MHukeTB3MRgwFgYD
; VQQEDA8zMzQ2MjMzMjQyMzQzMjUxHzAdBgoJkiaJk/IsZAEBDA8zMTAxMjIzOTM1
; MDAwMDMxDTALBgNVBAwMBDAwMDAxETAPBgNVBBoMCFNhbXBsZSBFMRgwFgYDVQQP
; DA9TYW1wbGUgQnVzaW5lc3MwCgYIKoZIzj0EAwIDRwAwRAIgF7D30eSBklfo+oel
; 1B0z64eJDB9MB3rCoiFZlj+mz0YCIHYI87eyqdtw2LOcAoBRhyxlBT6i28+Z/8t9
; bYsMIYvp
; -----END CERTIFICATE REQUEST-----