Re: OCSP and issuerNameHash (was: Object names)

[Rich Salz]

> IMHO at least this type definition containing SET OF might lead to
> different DER-encodings

Nope.  As others have pointed out DER defines a unique encoding for "SET
OF"
You might want to look at i2d_ASN1_SET in crypto/a_set.c

> Can somebody with real OCSP experience say anything about this?

I believe we found this the hard way at my old employer, but details are
fuzzy. :)

The CVS log for a_set.c shows:

----------------------------
revision 1.2
date: 1998/12/29 21:43:40;  author: ben;  state: Exp;  lines: +91 -10
Fix incorrect DER encoding of SETs and all knock-ons from that.

hope this helps.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]