Re: further x509 cleanup in rpki-client

On Thu, Feb 18, 2021 at 02:41:39PM +0100, Claudio Jeker wrote: > Instead of iterating over all x509 extension and look for SKI and AKI use > X509_get_ext_d2i(). This reduces the complexity a fair bit. Also add > additional checks (e.g. make sure the extensions are non-critical). > More cleanup in c

further x509 cleanup in rpki-client

Instead of iterating over all x509 extension and look for SKI and AKI use X509_get_ext_d2i(). This reduces the complexity a fair bit. Also add additional checks (e.g. make sure the extensions are non-critical). More cleanup in cert.c should follow but one step at a time. -- :wq Claudio Index: ce