Bruce Stephens schrieb: > X509_get_ext_count(), X509_get_ext(), and the usual stack macros > STACK_OF(X509_EXTENSION), sk_X509_EXTENSION_push() and so on, I guess. >
That does the trick. However, I'm stumped at how to convert an extension value back to a string. I call obj = X509_EXTENSION_get_object(ext); data = X509_EXTENSION_get_data(ext); and now have both the ASN.1 structure in an ASN1_OBJECT as well as its data in an ASN1_OCTET_STRING (at least if the documentation I googled is accurate). How do I get back from the octet string to a normal ascii string? The extension was put into the certificate with the following code: ASN1_OCTET_STRING *ex_oct = NULL; ex_oct = ASN1_OCTET_STRING_new(); ASN1_OCTET_STRING_set(ex_oct,policy,-1); Is there any up-to-date complete documentation available for the full function set of OpenSSL? For some of the stuff, like ASN.1 manipulation, I can't even find anything on Google... Regards, --ck ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]