Re: Parsing X509 certificate subjectAltName

2012-10-17 Thread Ken Goldman
On 9/12/2012 9:36 AM, Dr. Stephen Henson wrote: You check each value of the returned GENERAL_NAMES structure until you find the one you are interested in. It looks like in your case it is the type GEN_DIRNAME which means the X509_NAME field directoryName of the union is relevant. You can then an

Re: Parsing X509 certificate subjectAltName

2012-09-12 Thread Dr. Stephen Henson
On Wed, Sep 12, 2012, Kenneth Goldman wrote: > If I shouldn't use GEN_IPADD, what should I use? > > The goal is to extract the text value associated with several OIDs. > dumpasn1 says the values are PrintableString. > You check each value of the returned GENERAL_NAMES structure until you find

Re: Parsing X509 certificate subjectAltName

2012-09-12 Thread Kenneth Goldman
ers@openssl.org, Date: 09/11/2012 06:49 PM Subject: Re: Parsing X509 certificate subjectAltName Sent by:owner-openssl-us...@openssl.org On Tue, Sep 11, 2012, Charles Mills wrote: > > { > >

RE: Parsing X509 certificate subjectAltName

2012-09-11 Thread Charles Mills
Thanks! Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Tuesday, September 11, 2012 3:46 PM To: openssl-users@openssl.org Subject: Re: Parsing X509 certificate subjectAltName On Tue, Sep 11

Re: Parsing X509 certificate subjectAltName

2012-09-11 Thread Dr. Stephen Henson
On Tue, Sep 11, 2012, Charles Mills wrote: > > { > > case GEN_DNS: > > case GEN_URI: > > case GEN_IPAD

RE: Parsing X509 certificate subjectAltName

2012-09-11 Thread Charles Mills
bool Comm::isAltNameMatch(X509 *certificate, const char *nodeName) { // there is alternative code on page 136 of O'Reilly OpenSSL unsigned char *pBuffer = NULL; int length = 0; GENERAL_NAMES *subjectAltNames; b