Thanks! Charles
-----Original Message----- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Tuesday, September 11, 2012 3:46 PM To: openssl-users@openssl.org Subject: Re: Parsing X509 certificate subjectAltName On Tue, Sep 11, 2012, Charles Mills wrote: > > { > > case GEN_DNS: > > case GEN_URI: > > case GEN_IPADD: > > > ASN1_STRING_to_UTF8(&pBuffer, pName->d.ia5); > > b = > isWildcardedCNcompare(reinterpret_cast<char *>(pBuffer), nodeName); > > Don't do that with the GEN_IPADD: it isn't an IA5String it is an OCTETSTRING representing the IP address in a format described by RFC3280 et al. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org