We don't have APIs that provide OpenSSL's particular string formatting. They're not standardized in any way. Our API should give you sufficient information to format strings in the same way OpenSSL does if that's what you need.
Alex On Tue, Aug 26, 2025 at 11:11 PM Ross Vandegrift <[email protected]> wrote: > > Hi Paul, > > On Mon, Aug 18, 2025 at 03:09:58PM -0400, Paul Kehrer wrote: > > Yes, we expose X.509 extensions and that includes subject alternative name, > > which contains dNSName values. > > https://cryptography.io/en/latest/x509/reference/#cryptography.x509.SubjectAlternativeName > > Unless I'm missing something, that provides the SAN values and > cryptography's types. But I need openssl's names for those types; see > the switch statement at [1]. > > It's a weird thing to ask, since cryptography uses classes to represent > different SAN types. This is much nicer than openssl for code. But I > might need to be input/output compatible with its string prefixes like > "DNS", "IP Address", "email", etc. > > Ross > > [1] - > https://github.com/openssl/openssl/blob/c66d9760a77c5a8ec4b8bdb6000b4213384d0e3e/crypto/x509/v3_san.c#L86-L205 > _______________________________________________ > Cryptography-dev mailing list -- [email protected] > To unsubscribe send an email to [email protected] > https://mail.python.org/mailman3//lists/cryptography-dev.python.org > Member address: [email protected] -- All that is necessary for evil to succeed is for good people to do nothing. _______________________________________________ Cryptography-dev mailing list -- [email protected] To unsubscribe send an email to [email protected] https://mail.python.org/mailman3//lists/cryptography-dev.python.org Member address: [email protected]
