Re: ASN1_generate_v3: reading X509 extension via the API

2014-01-18 Thread Graham Leggett
On 18 Jan 2014, at 4:09 AM, Graham Leggett minf...@sharp.fm wrote: I am trying to load the name and value of an X509 extension programmatically via the API (in other words, the openssl.cnf file isn't being used), and I am struggling with openssl telling me that the tag doesn't exist. The

Re: ASN1_generate_v3: reading X509 extension via the API

2014-01-18 Thread Dr. Stephen Henson
On Sat, Jan 18, 2014, Graham Leggett wrote: Some more digging and I still can't find how openssl parses extensions. Reverse engineering the code, it appears that ASN1_generate_v3() expects to be passed a parameter string that is a name value pair separated with a colon, which the string

Re: ASN1_generate_v3: reading X509 extension via the API

2014-01-18 Thread Graham Leggett
On 18 Jan 2014, at 2:25 PM, Dr. Stephen Henson st...@openssl.org wrote: Have a look at demos/x509/mkcert.c I eventually found it was as simple as this: *extension = X509V3_EXT_conf(NULL, NULL, (char *)name, (char *)val); What threw me was whether it was ok to pass NULL or not (it is).

ASN1_generate_v3: reading X509 extension via the API

2014-01-17 Thread Graham Leggett
Hi all, I am trying to load the name and value of an X509 extension programmatically via the API (in other words, the openssl.cnf file isn't being used), and I am struggling with openssl telling me that the tag doesn't exist. The extension I want to load has the name keyUsage and value