<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">I can only plead ignorance. Those functions do indeed do what I need. With that I don't have any direct need for the d2i implementation, although it is still a bit odd for them to be defined on all the other extensions but not NAME_CONSTRAINTS.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Thanks for the help!</div> <div id="bloop_sign_1452694411074679808" class="bloop_sign"><div style="font-family:helvetica,arial;font-size:13px"><br></div><div style="font-family:helvetica,arial;font-size:13px">-Paul</div></div> <br><p class="airmail_on">On January 9, 2016 at 7:14:12 PM, Dr. Stephen Henson (<a href="mailto:steve@openssl.org">steve@openssl.org</a>) wrote:</p> <blockquote type="cite" class="clean_bq"><span><div><div></div><div>On Sat, Jan 09, 2016, Paul Kehrer wrote:
<br>
<br>> The ASN1 functions for NAME_CONSTRAINTS are not declared or implemented in the current OpenSSL releases. This is inconsistent with other extension structs and (I believe) means you either need to declare them yourself or attempt to build NAME_CONSTRAINTS using nconf functions. Below is a patch to current git master that adds support for these functions.
<br>>
<br>> If there's a preferred way to test that these macros behave as expected I'll be happy to add the tests to this patch.
<br>>
<br>
<br>Why do you need the i2d/d2i functions? It is possible to encode and decode the
<br>extension using X509_get_ext_d2i() and X509_add1_ext_i2d().
<br>
<br>Steve.
<br>--
<br>Dr Stephen N. Henson. OpenSSL project core developer.
<br>Commercial tech support now available see: http://www.openssl.org
<br>_______________________________________________
<br>openssl-dev mailing list
<br>To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
<br></div></div></span></blockquote></body></html>