Hi!

> Err start again :-)

Oops, sorry, I didn't see thread about it.

> Purpose checking is done automatically in the newer releases of OpenSSL
> as part of the client certificate verify process, including checking 
>extendedKeyUsage.
>
> Several checks take place, currently documented in the x509 manual page.
>
> If you want to perform the checks yourself you can all X509_check_purpose() on the
certificate.
>
> If you still want to get the OIDs in extendedKeyUsage then you can call
> the X509 extension routines documented in doc/openssl.txt,
> X509_get_ext_d2i() will return a STACK_OF(ASN1_OBJECT) for extended key
> usage. There's some documentation about manipulating an ASN1_OBJECT
> structure in the older SSLeay docs in doc/ssleay.txt

Thank you very much.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to