How to change the subject of a Request in a MS CA custom policy module?   

Hello,

I try to build my first custom policy module.
The reason ist that we want to set all DN of a certain certificate
type (webserver certs) according to a template.
As we issue these certs for all kinds of servers (IIS, apache, tomcat,
etc.) we cannot control the creation of the request, but have to live
with the pkcs10-requests that are sent to our CA (MS Server 2003 R2
EE).

I tried to gather all Information I need in order to implement this
and came up with the following:
use a custom policy module, that works like this:
- if the certificate has an extended Key Usage for
WebServerauthentication
- then change the certificate subject according to the template cn=<cn
in request>, o=ourCompany, c=<c in request>

So when I work my way through the documentation on msdn I hit several
questions:
- how can I find out about the extended Key Usage ? Is
GetCertificateExtension the right way? what would be the
strExtensionName?
- the subject seems only to be setable in pieces, not as a whole. Can
I delete pieces with SetCertificateProperty ?

Hoping for many answers,

Alexander Jung

date: Wed, 11 Jun 2008 05:36:01 -0700 (PDT)   author:   unknown