Many types of X509Extension can not be created

[Alex Stapleton]

This issue was reported on the SF mailing list here:
http://sourceforge.net/mailarchive/message.php?msg_name=279239c70804080550j3e89c047jbb5692bf88b57129%40mail.gmail.com

You can't create most flavours of X509Extension.

e.g.

# this works fine
X509Extension('basicConstraints',1, 'CA:true')

# this throws a ValueError
X509Extension('nsComment', 0, 'OpenSSL Generated Certificate'))

[Alex Stapleton (alex-stapleton)]

I've attached the patch I linked to on the SF mailing list. Please test it :)

[Jean-Paul Calderone (exarkun)]

Note to myself, there's another patch at http://prol.etari.at/pyopenssl/ which adds some test coverage

[Jean-Paul Calderone (exarkun)]

I've merged x509extension into trunk. It is still not possible to create *all* types of extensions. For example, proxyCertInfo requires a configuration database, but there is no way to represent this or supply it to X509Extension. However, extensions like nsComment are now supported.