Hello,

Would it be possible to add the following modification to x509v3. 
it adds two definitions of stacks used in some areas of pkix modules
and it caches three extended key usages. 

Thanks in advance to the friendly maintainers.

Peter Sylvester



diff -c openssl-SNAP-20000829/crypto/x509v3/x509v3.h openssl/crypto/x509v3/x509v3.h
*** openssl-SNAP-20000829/crypto/x509v3/x509v3.h        Sat Jun 17 02:01:30 2000
--- openssl/crypto/x509v3/x509v3.h      Mon Aug 28 14:55:54 2000
***************
*** 257,262 ****
--- 257,265 ----
  DECLARE_STACK_OF(POLICYINFO)
  DECLARE_ASN1_SET_OF(POLICYINFO)
  
+ #define GENERAL_NAMES STACK_OF(GENERAL_NAME)
+ #define CERTIFICATEPOLICIES STACK_OF(POLICYINFO)
+ 
  #define X509V3_conf_err(val) ERR_add_error_data(6, "section:", val->section, \
  ",name:", val->name, ",value:", val->value);
  
***************
*** 326,331 ****
--- 329,337 ----
  #define XKU_SMIME             0x4
  #define XKU_CODE_SIGN         0x8
  #define XKU_SGC                       0x10
+ #define XKU_OCSP_SIGN         0x20
+ #define XKU_TSP_SIGN          0x40
+ #define XKU_DVCS_SIGN         0x80
  
  #define X509_PURPOSE_DYNAMIC  0x1
  #define X509_PURPOSE_DYNAMIC_NAME     0x2

----------------------------------------------------------------------------------------

diff -c openssl-SNAP-20000829/crypto/x509v3/v3_purp.c openssl/crypto/x509v3/v3_purp.c
*** openssl-SNAP-20000829/crypto/x509v3/v3_purp.c       Fri Jun  2 01:01:00 2000
--- openssl/crypto/x509v3/v3_purp.c     Mon Aug 28 14:48:13 2000
***************
*** 317,322 ****
--- 317,334 ----
                                case NID_ms_sgc:
                                case NID_ns_sgc:
                                x->ex_xkusage |= XKU_SGC;
+                                 break ;
+   
+                                 case NID_OCSP_sign:
+                                 x->ex_xkusage |= XKU_OCSP_SIGN;
+                                 break ;
+   
+                                 case NID_time_stamp:
+                                 x->ex_xkusage |= XKU_TSP_SIGN;
+                                 break ;
+   
+                                 case NID_dvcs:
+                                 x->ex_xkusage |= XKU_DVCS_SIGN;
                        }
                }
                sk_ASN1_OBJECT_pop_free(extusage, ASN1_OBJECT_free);
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to