I can only plead ignorance. Those functions do indeed do what I need. With that 
I don't have any direct need for the d2i implementation, although it is still a 
bit odd for them to be defined on all the other extensions but not 
NAME_CONSTRAINTS.

Thanks for the help!

-Paul

On January 9, 2016 at 7:14:12 PM, Dr. Stephen Henson ([email protected]) wrote:

On Sat, Jan 09, 2016, Paul Kehrer wrote:  

> The ASN1 functions for NAME_CONSTRAINTS are not declared or implemented in 
> the current OpenSSL releases. This is inconsistent with other extension 
> structs and (I believe) means you either need to declare them yourself or 
> attempt to build NAME_CONSTRAINTS using nconf functions. Below is a patch to 
> current git master that adds support for these functions.   
>  
> If there's a preferred way to test that these macros behave as expected I'll 
> be happy to add the tests to this patch.  
>  

Why do you need the i2d/d2i functions? It is possible to encode and decode the  
extension using X509_get_ext_d2i() and X509_add1_ext_i2d().  

Steve.  
--  
Dr Stephen N. Henson. OpenSSL project core developer.  
Commercial tech support now available see: http://www.openssl.org  
_______________________________________________  
openssl-dev mailing list  
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev  
_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Reply via email to