RE: X509 extensions checking.

2001-12-26 Thread Alexey Kobozev
Hi! > Err start again :-) Oops, sorry, I didn't see thread about it. > Purpose checking is done automatically in the newer releases of OpenSSL > as part of the client certificate verify process, including checking >extendedKeyUsage. > > Several checks take place, currently documented in the x

Re: X509 extensions checking.

2001-12-26 Thread Dr S N Henson
Alexey Kobozev wrote: > > Hi, All! > > Suppose I have a SSL server and I want to check the purpose of > the client certificate, which means that I need to check the > enhancedKeyUsage contents. What I've done is enumerated the > X509 extensions by X509_get_ext_count() and X509_get_ext(), > found