"D. K. Smetters" wrote:
> 
> 
> It is true you can get to the SSL structure from the ex_data in the
> X509_STORE_CTX (thanks very much for pointing that out, I had missed
> it entirely). However, a) it's not easy to find (though I may just be
> blinder than most :-), and b) while it's available through the ex_data
> field, I don't think it's presence there is documented, and I as a user
> of the code wouldn't be sure that it's presence there was meant to be
> used by callbacks or something I could really rely on from version
> to version of OpenSSL. 

It is documented now at least in the
SSL_get_ex_data_X509_STORE_CTX_idx() manual page and includes an
example. Like most OpenSSL functions its guaranteed to work until
someone can think of a good enough reason to break it :-)

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Gemplus: http://www.gemplus.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to