On Tue, Sep 11, 2012, Charles Mills wrote:

> 
>                                                 {
> 
>                                                 case GEN_DNS:
> 
>                                                 case GEN_URI:
> 
>                                                 case GEN_IPADD:
> 
>  
> ASN1_STRING_to_UTF8(&pBuffer, pName->d.ia5);
> 
>                                                                 b =
> isWildcardedCNcompare(reinterpret_cast<char *>(pBuffer), nodeName);
> 
>  

Don't do that with the GEN_IPADD: it isn't an IA5String it is an OCTETSTRING
representing the IP address in a format described by RFC3280 et al.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to