Re: [openssl-users] Example code to add several CRL distribution points

2017-11-24 Thread Dirk Menstermann
Thanks a lot Dave. That helped. Bye Dirk On 23.11.2017 18:04, Dave Coombs wrote: > Hi Dirk, > > First point: you are populating distpoint->name.relativename (which is a > union member) but setting the discriminator distpoint->type to 0, which > indicates to use fullname rather than relativenam

Re: [openssl-users] Example code to add several CRL distribution points

2017-11-23 Thread Dave Coombs
Hi Dirk, First point: you are populating distpoint->name.relativename (which is a union member) but setting the discriminator distpoint->type to 0, which indicates to use fullname rather than relativename. So your structure will not be interpreted correctly. In any case, I think you want to p

Re: [openssl-users] Example code to add several CRL distribution points

2017-11-23 Thread Dirk Menstermann
Thanks Dave, It seems that I do something wrong when filling the STACK_OF(DIST_POINT): X509_NAME_ENTRY *nameEntry = X509_NAME_ENTRY_new(); X509_NAME_ENTRY_set_data (nameEntry, V_ASN1_IA5STRING /*MBSTRING_ASC*/, (const unsigned char*) "http://example.com/";, 19); S

Re: [openssl-users] Example code to add several CRL distribution points

2017-11-22 Thread Dave Coombs
Hi, You can use X509V3_EXT_i2d(NID_crl_distribution_points, critical, sk) where sk is a STACK_OF(DIST_POINT) that you have previously filled with multiple URIs. Cheers, -Dave > On Nov 22, 2017, at 06:58, Dirk Menstermann wrote: > Hi, > > can anybody share example code to add more than 1 CR