RE: X509 Extension Parsing

2003-06-05 Thread Justin.Wienckowski
Tried the following: POLICYINFO *cp; if ((cp = X509_get_ext_d2i(xs, NID_certificate_policies, NULL, NULL)) == NULL) return "NoCP"; And it does indeed return NULL and thus "NoCP", even when X509_get_ext_by_NID does return a valid X509_EXTENSION object. Attached is the client cert I am usi

X509 Extension Parsing

2003-06-05 Thread Justin.Wienckowski
Per Dr. Henson's suggestion I've been writing some code for Apache mod_ssl in order to determine the certificate class for our corporate PKI certs that have the Certificate Policy attribute. I've had some odd results and wanted to see if anyone can clarify for me. I was unable to find the Cert