If I shouldn't use GEN_IPADD, what should I use? The goal is to extract the text value associated with several OIDs. dumpasn1 says the values are PrintableString.
-- Ken Goldman kgold...@us.ibm.com 914-945-2415 (862-2415) From: "Dr. Stephen Henson" <st...@openssl.org> To: openssl-users@openssl.org, Date: 09/11/2012 06:49 PM Subject: Re: Parsing X509 certificate subjectAltName Sent by: owner-openssl-us...@openssl.org On Tue, Sep 11, 2012, Charles Mills wrote: > > { > > case GEN_DNS: > > case GEN_URI: > > case GEN_IPADD: > > > ASN1_STRING_to_UTF8(&pBuffer, pName->d.ia5); > > b = > isWildcardedCNcompare(reinterpret_cast<char *>(pBuffer), nodeName); > > Don't do that with the GEN_IPADD: it isn't an IA5String it is an OCTETSTRING representing the IP address in a format described by RFC3280 et al. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org