Kannan Bhoopathy wrote:
> I saw the CERTCertificate structure. Right now we can do this. But NSS
> suggests to use only their exported public functions. It will work presently.
>
> But if NSS people rename the structure member name then we may end
> up in trouble.
>
> NSS developers & maintainers. please suggest.
Unfortunately until we get the new API's finished, we are stuck in a
situation where there are some things that we can't do in a way that
will carry on in the future.
The current commitment is that all NSS 3.X versions will be binary
compatible with previously released DLL's. Since the CERTCertificate
structure was released as a non-opaque structure, we will have to
maintain the structure member names and order through the lifetime of 3.X.
When 4.X is released, Certs will be represented by the opaque data
structure NSSCertificate. Initially we plan to have a small
compatibility library that allows many of the common calls (those we
advertise as public in nss.def... as opposed to those we just export in
nss.def). Part of the compantibility library will provide a
CERTCertificate structure which is compatible with the existing structure.
The upshot is go ahead and use the nickname field out of the cert for
now, but watch for updates to pki1 where the new API's are taking shape.
BTW thanks for asking rather than just blinding using the structure.
There has been a lot of flux in NSS, and there are lots of internal
functions that have been depricated in favor of new ones. Questions like
this in the newsgroup will help us 1) get the new API right, and 2)
determine what we need to document.
bob
>
> Javier Delgadillo wrote:
>
>
>>NSS doesn't appear to give an accessor function for the nickname of a
>>cert, so you may have to do cert->nickname until such an accessor is
>>provided.
>>
>>Kannan Bhoopathy wrote:
>>
>>
>>>Hello,
>>>
>>>How to find the nickname of a certificate if we have a pointer to
>>>CERTCertificate.
>>>
>>>Actually I call SSL_PeerCertificate(fd) to obtain peer certificate. But
>>>how do I find the nickname
>>>of the peer certificate?
>>>
>>>-- Kannan.
>>>
>>>
>>>
>>--
>>Javier Delgadillo Sun / Netscape Alliance
>>(408) 276-3977 Software Engineer
>>mailto:[EMAIL PROTECTED] http://people.netscape.com/javi
>>
>
