Alexei Chetroi wrote:

Yep, it complains on prototyping. Anyway, according to RFC3280 4.1.2.2

<Cite>
Given the uniqueness requirements above, serial numbers can be
expected to contain long integers.  Certificate users MUST be able to
handle serialNumber values up to 20 octets.  Conformant CAs MUST NOT
use serialNumber values longer than 20 octets.

Note: Non-conforming CAs may issue certificates with serial numbers
that are negative, or zero.  Certificate users SHOULD be prepared to
gracefully handle such certificates.
</Cite>

If I understand correctly, 20 octets won't fit into long long int.

Yes, but (char *) can handle it now.

If we change RETVAL to char *, does it mean that we shouldn't use
sprintf in crypto-utils.lib?

The "problem" is that OpenSSL returns decimal encoded serial numbers. I use sprintf %llX to convert decimal numbers to hexadecimal numbers. If you know how we can convert without %X then we can solve the complete issue. Actually I don't know a replacement for %X.

Michael
--
_______________________________________________________________

Michael Bell                    Humboldt-Universitaet zu Berlin

Tel.: +49 (0)30-2093 2482       ZE Computer- und Medienservice
Fax:  +49 (0)30-2093 2704       Unter den Linden 6
[EMAIL PROTECTED]   D-10099 Berlin
_______________________________________________________________

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature



Reply via email to