Peter 'Luna' Runestig wrote:
>
> Hi all!
>
> I have a X509v3 subjectAltName with an "IP address" extention. If I'm
> using i2v_GENERAL_NAME() to get the human readable representation of it,
> like in X509V3_EXT_print(), I get the value string "IP Address:a.b.c.d".
> But if I want to create such an extention using X509V3_EXT_conf_nid(),
> it expects a value string of "IP:a.b.c.d". This is a problem for me,
> since there isn't a way, within OpenSSL, to convert between the value
> names "IP" and "IP Address". Doing that conversion "on the side" in my
> application isn't hard, of course, but isn't very neat. Is there any
> changes to expect in this area? I haven't checked the latest code, I'm
> talking about 0.9.6 here.
>
> BTW, the same goes for "RID" and "Registered ID".
>
Why do you want to do that? The human readable version of the extension
(and indeed human readable versions of things like certificates)
shouldn't really be parsed by an application since there's no guarantees
they will not change in future. There are much bigger differences in
things like the certificate policies extension.
The internal decoded structures are the "machine readable" versions of
extensions.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
