Re: [openssl-users] OpenSSL 1.1.0: How to get X509_STORE from X509_LOOKUP?

2018-06-12 Thread Matt Caswell
On 12/06/18 10:58, Stephan Mühlstrasser wrote: > In OpenSSL 1.0.2 this was no problem as the "X509_STORE *store_ctx" > member of the X509_LOOKUP structure was directly accessible. But in > OpenSSL 1.1.0 the X509_LOOKUP structure is opaque, and as far as I can > see there is no API function

[openssl-users] OpenSSL 1.1.0: How to get X509_STORE from X509_LOOKUP?

2018-06-12 Thread Stephan Mühlstrasser
Hi, I'm migrating from OpenSSL 1.0.2 to OpenSSL 1.1.0. The application attaches additional data to X509 certificate data structures via the X509_set_ex_data()/X509_get_ex_data() functions. A tricky detail is that the additional data must be attached when OpenSSL loads certificates from PEM