ASK OPENSSL: CRL & extensions

[Massimiliano Pala]

Hi all,

I have one question for you. I want to check extensions added to a CRL
entry but I do not know how to access informations. Actually I use the
code:

        rev = X509_CRL_get_REVOKED(crl);

        for(i = 0; i < sk_X509_REVOKED_num(rev); i++) {

            r = sk_X509_REVOKED_value(rev, i);

             for (i=0; i<sk_X509_EXTENSION_num(r->extensions); i++)
             {
                  ASN1_OBJECT *obj;
                  ASN1_OBJECT *obj_tmp;
                  X509_EXTENSION *ex;

                  ex=sk_X509_EXTENSION_value(r->extensions, i);
                  obj=X509_EXTENSION_get_object(ex);

                  [ Missing Code ]

              }

I would like in the [ Missing Code ] to check the object (that is of
the NID_crl_reason type) for its value, for example if it is a
certificateHold or RemoveFromCRL, etc...

What's the correct way to do it ?

Thanks to all of you...

--

C'you,

	Massimiliano Pala

--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                [EMAIL PROTECTED]
                                                 Tel.:   +39 (0)59  270  094
http://www.openca.org                            Fax:    +39   178  221 8225
http://openca.sourceforge.net                    Mobile: +39 (0)347 7222 365

smime.p7s
Description: S/MIME Cryptographic Signature