Merge pull request #2118 from reaperhulk/support-rid-encoding

support registeredID general name encoding

1 files changed, 12 insertions, 1 deletions

diff --git a/src/cryptography/hazmat/backends/openssl/backend.py b/src/cryptography/hazmat/backends/openssl/backend.py
index bbec6185..d6493778 100644
--- a/src/cryptography/hazmat/backends/openssl/backend.py
+++ b/src/cryptography/hazmat/backends/openssl/backend.py
@@ -162,8 +162,19 @@ def _encode_subject_alt_name(backend, san):
             res = backend._lib.ASN1_STRING_set(ia5, value, len(value))
             assert res == 1
             gn.d.dNSName = ia5
+        elif isinstance(alt_name, x509.RegisteredID):
+            gn = backend._lib.GENERAL_NAME_new()
+            assert gn != backend._ffi.NULL
+            gn.type = backend._lib.GEN_RID
+            obj = backend._lib.OBJ_txt2obj(
+                alt_name.value.dotted_string.encode('ascii'), 1
+            )
+            assert obj != backend._ffi.NULL
+            gn.d.registeredID = obj
         else:
-            raise NotImplementedError("Only DNSNames are supported right now")
+            raise NotImplementedError(
+                "Only DNSName and RegisteredID supported right now"
+            )
 
         res = backend._lib.sk_GENERAL_NAME_push(general_names, gn)
         assert res != 0