Oscar Jacobsson wrote:
> Richard Levitte - VMS Whacker wrote:
> > *> 105:d=2 hl=2 l= 19 cons: cont [ 0 ]
> > > 107:d=3 hl=2 l= 17 cons: SEQUENCE
> > > 109:d=4 hl=2 l= 15 cons: SEQUENCE
> > *> 111:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Authority Key Identifier
> > *> 116:d=5 hl=2 l= 8 prim: OCTET STRING
>
> This sure looks like crlExtrensions to me (as in a RFC-2459 X509v2 CRL),
> which is EXPLICIT OPTIONAL, which I don't really know what that
> implies...
This mean you don't have to include it, but if you do, you should add a tag [0] (offset
105) in front of it that must not overwrite the SEQUENCE tag of CRLExtensions (offset
107). Next SEQUENCE(offset 109) is CRLExtension. then the OID is the extnId (offset
111), we don't see the optionnal flag critical , but we have the extnValue(offset 116)
:
OCTET STRING
This looks like a valid crlExtensions as in a RFC-2459, but I'm not sure if OpenSSL
pretends to support RFC-2459 fully.
No one has any comment on the fact OBJ_obj2nid is not able to retrieve objects that
have
been added with OBJ_create ?
I have seen code in OBJ_obj2nid that seems to be intended to enable that, but it is
flawed.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
