Dr Stephen Henson wrote:
> 4. There is no way to lookup by other methods, for example lookup by
> subject key id (needed for proper certificate chain verification) or
> lookup by issuer name (needed to find matching certificates in an SSL
> client when authentication is requested). To add new lookup methods you
> need to add new function pointers to the X509_LOOKUP_METHOD structure
> and this breaks all existing code!
Not sure I understand this one: so long as you are prepared to recompile
existing code, any new function pointers will be NULL.
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html
"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
- Indira Gandhi
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
