[EMAIL PROTECTED] wrote:
>
> I'm trying (hard) to parse a CRL (version 2) using the OpenSSL API.
>
> I can now parse most of it and dump it to a text file using the
> X509_CRL_print() function.
> The problem is that the CRL Reason Code for the revoked certificates does
> not show anything.
> If I use the OpenSSL commandline program with the crl argument, the reason
> codes are shown okay.
> Am I missing something with extension handling here ? Must I do something
> special to handle extensions ?
> Any help appreciated.
>
I'm tempted to say RTFM here because as most OpenSSL users know, most of
the time there isn't a FM to R :-) however this is probably the
exception.
Try adding X509V3_add_standard_extensions(); to initialiase the
extension code. Theres some fairly complete info about how the new V3
extension code works in docs/openssl.txt
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
