On Wed, Jul 21, 2004, [EMAIL PROTECTED] wrote: > > I have tried X509_get_ext_d2i > akid = X509_get_ext_d2i(dev_cert, > NID_authority_key_identifier,NULL, NULL) > This returns AUTHORITY_KEYID structure..After that will > ASN1_OCTET_STRING_cmp() serve the purpose? >
Call the same function with NID_subject_key_identifier on the other cert, if it works you'll get an OCTET STRING back. Then check akid->keyid is not NULL, finally do ASN1_OCTET_STRING_cmp() on akid->keyid and whatevere you got back from the other cert. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
