Re: [Openvpn-devel] [PATCH 1/7] OpenSSL: don't use direct access to the internal of X509

2017-06-11 Thread Steffan Karger
Hi, On 19-05-17 12:38, Emmanuel Deloget wrote: > OpenSSL 1.1 does not allow us to directly access the internal of > any data type, including X509. We have to use the defined > functions to do so. > > In x509_verify_ns_cert_type() in particular, this means that we > cannot directly check for the

[Openvpn-devel] [PATCH 1/7] OpenSSL: don't use direct access to the internal of X509

2017-05-19 Thread Emmanuel Deloget
OpenSSL 1.1 does not allow us to directly access the internal of any data type, including X509. We have to use the defined functions to do so. In x509_verify_ns_cert_type() in particular, this means that we cannot directly check for the extended flags to find whether the certificate should be