On Mon, Dec 13, 2004, Zerg wrote:
> Hi all.
> I add the such extension to CSR with config file
> authorityInfoAccess = CA Issuers;email:[EMAIL PROTECTED]
> parsing my config file and
> using X509V3_EXT_REQ_add_conf call
>
> but when I have manualy parsed the request with such code
>
> ext - authorityInfoAccess extension
> method = X509V3_EXT_get(ext);
> p = ext->value->data;
> if(method->it) ext_str = ASN1_item_d2i(NULL, &p, ext->value->length,
> ASN1_ITEM_ptr(method->it));
> else ext_str = method->d2i(NULL, &p, ext->value->length);
> if(method->i2v)
> if(!(nval = method->i2v(method, ext_str, NULL)))
> {
> for (j = 0; j < sk_CONF_VALUE_num(nval); j++)
> {
> valcnf = sk_CONF_VALUE_value(nval, j);
> printf("%s:%s\n",valcnf->name,valcnf->value);
> }
> }
>
> and I've got the next value of this extension:
> "CA Issuers - email:[EMAIL PROTECTED]"
>
> valcnf->name = CA Issuers - email
> valcnf->value = [EMAIL PROTECTED]
>
> but I need that value "CA Issuers;email:[EMAIL PROTECTED]"!The value that I
> have assumed in config file.
> By the way, when I copying "CA Issuers - email:[EMAIL PROTECTED]" to config
> file:
> authorityInfoAccess = CA Issuers - email:[EMAIL PROTECTED]
> X509V3_EXT_REQ_add_conf come into obscurity.
> The same situation with keyUsage, I am writing to config -
> "keyCertSign", and I've got "Certificate Sign".How to get the same value
> with that I've pointed in the config file?
> Any suggestions?
>
The textual representation is a human readable version of the encoded
extension: in general it isn't the same format as used in the config file
(which is less readable and restricted in various ways).
What are you trying to do?
Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
