Re: ASN1_generate_v3: reading X509 extension via the API

2014-01-18 Thread Graham Leggett
On 18 Jan 2014, at 2:25 PM, "Dr. Stephen Henson" wrote: > Have a look at demos/x509/mkcert.c I eventually found it was as simple as this: *extension = X509V3_EXT_conf(NULL, NULL, (char *)name, (char *)val); What threw me was whether it was ok to pass NULL or not (it is). Regards, Graham -

Re: ASN1_generate_v3: reading X509 extension via the API

2014-01-18 Thread Dr. Stephen Henson
On Sat, Jan 18, 2014, Graham Leggett wrote: > > Some more digging and I still can't find how openssl parses extensions. > > Reverse engineering the code, it appears that ASN1_generate_v3() expects to > be passed a parameter string that is a name value pair separated with a > colon, which the str

Re: ASN1_generate_v3: reading X509 extension via the API

2014-01-18 Thread Graham Leggett
On 18 Jan 2014, at 4:09 AM, Graham Leggett wrote: > I am trying to load the name and value of an X509 extension programmatically > via the API (in other words, the openssl.cnf file isn't being used), and I am > struggling with openssl telling me that the tag doesn't exist. > > The extension I

ASN1_generate_v3: reading X509 extension via the API

2014-01-17 Thread Graham Leggett
Hi all, I am trying to load the name and value of an X509 extension programmatically via the API (in other words, the openssl.cnf file isn't being used), and I am struggling with openssl telling me that the tag doesn't exist. The extension I want to load has the name "keyUsage" and value "nonR