I'm trying (hard) to parse a CRL (version 2) using the OpenSSL API.
I can now parse most of it and dump it to a text file using the
X509_CRL_print() function.
The problem is that the CRL Reason Code for the revoked certificates does
not show anything.
If I use the OpenSSL commandline program with the crl argument, the reason
codes are shown okay.
Am I missing something with extension handling here ? Must I do something
special to handle extensions ?
Any help appreciated.
FROM MY PROGRAM USING X509_CRL_print():
...
Revoked Certificates:
Serial Number: 37B3F581
Revocation Date: Aug 13 10:39:01 1999 GMT
CRL Reason Code:
..
Serial Number: 37B94F90
Revocation Date: Sep 8 08:01:18 1999 GMT
CRL Reason Code:
...
...
FROM OPENSSL COMMANDLINE:
...
Revoked Certificates:
Serial Number: 37B3F581
Revocation Date: Aug 13 10:39:01 1999 GMT
CRL Reason Code:
Certificate Hold
..
Serial Number: 37B94F90
Revocation Date: Sep 8 08:01:18 1999 GMT
CRL Reason Code:
Affiliation changed
...
...
TIA
Kim Hellan
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
