Mark wrote: > I noticed a function X509_subject_name_hash(). Will that give a unique > reference to a certificate? It seems to ;-)
No hash can be guaranteed to be unique. Issuer and serial number should be, but of course you need to exercise some intelligence here. You can use the subject hash (or a subset) to perform quick lookups. E.g., if you have a large number of certs indexed by their SN hash, you can quickly determine that you don't have the specified cert or find a few possible matches. In practice? A 20-byte hash will almost certainly be unique. What's your risk tolerance? Bear ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]