Re: templates and cert chain validity

2008-07-11 Thread Christian Weber
Hi again, sorry, we just found the error in using the Macros. When an asn structure is being parsed, the pointer to the funding ASN_OCTET_STRING becomes modified and thus points no no freeable memory. Christian Weber schrieb am 10.07.2008 13:41: ... To implement a validity checking which is

templates and cert chain validity

2008-07-11 Thread Weber
Hi there, i'm just about verification of certs. Since X509v3 there are many extensions with their own types. Some of them are known to the current implementation, many aren't. To implement a validity checking which is aware of different models shell as of RFC 3280 or chain as af ISIS-MTT. There

cert chain validity

2008-07-11 Thread Weber
Hi there, i've been looking into the sources to find a place where the cert chain checking is done in terms of the certs span of life. Downwards the chain each cert should become valid while the issuers cert is valid. I thought the right place would be somewhere within x509_vfy.c, perhaps at ch

templates and cert chain validity

2008-07-10 Thread Christian Weber
Hi there, I'm just about verification of certs. Since X509v3 there are many extensions with their own types. Some of them are known to the current implementation, many aren't. To implement a validity checking which is aware of different models shell as of RFC 3280 or chain as af ISIS-MTT. There