Tried the following:
POLICYINFO *cp;
if ((cp = X509_get_ext_d2i(xs, NID_certificate_policies, NULL, NULL)) ==
NULL)
return "NoCP";
And it does indeed return NULL and thus "NoCP", even when
X509_get_ext_by_NID does return a valid X509_EXTENSION object.
Attached is the client cert I am usi
Per Dr. Henson's suggestion I've been writing some code for Apache mod_ssl in order to
determine the certificate class for our corporate PKI certs that have the Certificate
Policy attribute.
I've had some odd results and wanted to see if anyone can clarify for me.
I was unable to find the Cert