On Wed, Apr 30, 2008, Carolin Latze wrote:

> Hi everybody,
> 
> is there an easy way to extract the certificate's issuer serialNumber
> (that is the one in the X509v3 Authority Key Identifier extension)? At
> the moment, I try to parse this extension using string methods, but I
> could imagine that there is another way to do this. Am I right?
> 

You use the extension functions, these lookup the extension and parse them
into an appopriate structure for example:

AUTHORITY_KEYID *akid = X509_get_ext_d2i(cert, NID_authority_key_identifier,
                                                                                
        NULL, NULL);

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to