On Wed, Mar 01, 2006, Tatsuya Tsurukawa wrote: > Hi All, > > I have a quick question. > How can I get To-Be-Signed portion of certificate with openssl api ? > In case of using JDK, X509Certificat class and getTBSCertificate() method > seem to be available for the same purpose. > > I'm not familiar with the openssl api, and I couldn't find the appropriate > api due to the luck of sample codes on the internet. >
Decode the certificate into an X509 structure using d2i_X509(). The TBS portion in OpenSSL is called X509_CINF and the relevant fields are available in the structure. If you want to reencode it call i2d_X509_CINF. Information about the d2i/i2d functions is in the FAQ. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
