On Mon, Jan 05, 2009, Giang Nguyen wrote:

> 
> A side question: what exactly does this "which is wrong" comment
> mean? :)
> 
> typedef struct x509_attributes_st
> ...
>  int single; /* 0 for a set, 1 for a single item (which is wrong) */
>       union   {
> ...
>       } X509_ATTRIBUTE;
> 

This actually addresses both the questions. In the distant past some
applications encoded certificate requests incorrectly and/or required an
incorrect encoding. That is there to tolerate and/or generate such stuff.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to