Hi all.
I add the such extension to CSR with config file
 authorityInfoAccess = CA Issuers;email:[EMAIL PROTECTED]
parsing  my config  file and
using X509V3_EXT_REQ_add_conf    call

but when  I have  manualy parsed the request with such code

ext - authorityInfoAccess  extension
method = X509V3_EXT_get(ext);
p = ext->value->data;
if(method->it) ext_str = ASN1_item_d2i(NULL, &p, ext->value->length,
ASN1_ITEM_ptr(method->it));
else ext_str = method->d2i(NULL, &p, ext->value->length);
if(method->i2v)
        if(!(nval = method->i2v(method, ext_str, NULL)))
    {
for (j = 0; j < sk_CONF_VALUE_num(nval); j++)
{
valcnf = sk_CONF_VALUE_value(nval, j);
printf("%s:%s\n",valcnf->name,valcnf->value);
}
}

and I've got the next value  of  this extension:
"CA Issuers - email:[EMAIL PROTECTED]"

valcnf->name = CA Issuers - email
valcnf->value = [EMAIL PROTECTED]

but I need that value  "CA Issuers;email:[EMAIL PROTECTED]"!The value that I
have assumed in config file.
By the way, when I copying  "CA Issuers - email:[EMAIL PROTECTED]"  to config
file:
authorityInfoAccess = CA Issuers - email:[EMAIL PROTECTED]
 X509V3_EXT_REQ_add_conf  come into obscurity.
The same situation with  keyUsage, I am writing   to config  -
"keyCertSign", and I've got "Certificate Sign".How to get the same value
with that I've pointed in the config file?
Any suggestions?

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to