Marco Donati wrote:
> 
> i cannot handle the CRL Distribution Points with the following code:
> 
[various examples omitted]

> 
> Where's the mistake?
> Is there any FAQ or documentation on these functions?
> 

You can try and do what this code is attempting: manually decoding the
extension value. However this is not recommended and it much easier to
use the extension code. Check out doc/openssl.txt. For example the
following may do what you want

STACK_OF(DIST_POINT)*crlDPStack=NULL;   

crlDPStack = X509_get_ext_d2i(cert, NID_crl_distribution_points,
NULL, NULL);

which is a little easier :-)

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to