Re: Error 0x22073072 when adding SKI to CA Cert

2014-03-01 Thread Viktor Dukhovni
On Sat, Mar 01, 2014 at 02:31:51PM -0500, Jeffrey Walton wrote: > So I'm clear: there is no cleanup on the X509V3_CTX? I could not find > a X509V3_CTX_free() or similar function. Correct, no cleanup: void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subj, X509_REQ *req,

Re: Error 0x22073072 when adding SKI to CA Cert

2014-03-01 Thread Jeffrey Walton
On Sat, Mar 1, 2014 at 7:29 AM, Dr. Stephen Henson wrote: > On Sat, Mar 01, 2014, Jeffrey Walton wrote: > >> I'm building a ca cert following .../demos/mkcert.c. The program is failing >> at: >> >> X509_EXTENSION* ex4 = >> X509V3_EXT_conf_nid(NULL, NULL, NID_subject_key_identifier, "hash"); >

Re: Error 0x22073072 when adding SKI to CA Cert

2014-03-01 Thread Dr. Stephen Henson
On Sat, Mar 01, 2014, Dr. Stephen Henson wrote: > On Sat, Mar 01, 2014, Jeffrey Walton wrote: > > > I'm building a ca cert following .../demos/mkcert.c. The program is failing > > at: > > > > X509_EXTENSION* ex4 = > > X509V3_EXT_conf_nid(NULL, NULL, NID_subject_key_identifier, "hash"); > >

Re: Error 0x22073072 when adding SKI to CA Cert

2014-03-01 Thread Dr. Stephen Henson
On Sat, Mar 01, 2014, Jeffrey Walton wrote: > I'm building a ca cert following .../demos/mkcert.c. The program is failing > at: > > X509_EXTENSION* ex4 = > X509V3_EXT_conf_nid(NULL, NULL, NID_subject_key_identifier, "hash"); > err = ERR_get_error(); > ... > > $ openssl errstr 0x22073072 > e