Mark wrote:
> I noticed a function X509_subject_name_hash().  Will that give a unique
> reference to a certificate?  It seems to ;-)

No hash can be guaranteed to be unique.  Issuer and serial number
should be, but of course you need to exercise some intelligence here.

You can use the subject hash (or a subset) to perform quick
lookups.  E.g., if you have a large number of certs indexed by
their SN hash, you can quickly determine that you don't have the
specified cert or find a few possible matches.

In practice?  A 20-byte hash will almost certainly be unique.
What's your risk tolerance?

Bear
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to