If I shouldn't use GEN_IPADD, what should I use?

The goal is to extract the text value associated with several OIDs. 
dumpasn1 says the values are PrintableString.

--
Ken Goldman   kgold...@us.ibm.com 
914-945-2415 (862-2415)




From:   "Dr. Stephen Henson" <st...@openssl.org>
To:     openssl-users@openssl.org, 
Date:   09/11/2012 06:49 PM
Subject:        Re: Parsing X509 certificate subjectAltName
Sent by:        owner-openssl-us...@openssl.org



On Tue, Sep 11, 2012, Charles Mills wrote:

> 
>                                                 {
> 
>                                                 case GEN_DNS:
> 
>                                                 case GEN_URI:
> 
>                                                 case GEN_IPADD:
> 
> 
> ASN1_STRING_to_UTF8(&pBuffer, pName->d.ia5);
> 
>                                                                 b =
> isWildcardedCNcompare(reinterpret_cast<char *>(pBuffer), nodeName);
> 
> 

Don't do that with the GEN_IPADD: it isn't an IA5String it is an 
OCTETSTRING
representing the IP address in a format described by RFC3280 et al.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org


Reply via email to