<div dir="ltr">I think what you want might be found in the book "Network Security with OpenSSL" from the year 2002, and the same code snippit can be found here:<div><br><a href="http://www.cs.odu.edu/~cs772/ssl/c-examples/NSopenssl/common.c">http://www.cs.odu.edu/~cs772/ssl/c-examples/NSopenssl/common.c</a><br></div><div><br></div><div>look for "post_connection_check".</div><div><br></div><div>This is just something I remember from reading. I have no experience with it.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Jan 10, 2016 at 7:07 PM, Karl Denninger <span dir="ltr"><<a href="mailto:karl@denninger.net" target="_blank">karl@denninger.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
Yeah, now I just have to figure out how to parse the X509 Extension
data from the certificate to pull out the SubjectAltName
information.... :-)<br>
<br>
There wouldn't be a snippet of code laying around somewhere that
does that given a X509 cert as input would there? It looks a bit
arcane....<span class=""><br>
<br>
<div>On 1/10/2016 21:04, Judson Wilson
wrote:<br>
</div>
</span><blockquote type="cite"><span class="">
<div dir="ltr">It's always good to start with the s_client and
s_server programs for incrementally verifying compatibility in
your new programs. Those would have failed on your
certificates, alerting you it's not a program problem.</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank"></a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
</span><span class=""><pre>_______________________________________________
openssl-users mailing list
To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" target="_blank">https://mta.openssl.org/mailman/listinfo/openssl-users</a>
</pre>
</span></blockquote><span class="">
<br>
<div>-- <br>
Karl Denninger<br>
<a href="mailto:karl@denninger.net" target="_blank">karl@denninger.net</a><br>
<i>The Market Ticker</i><br>
<font size="-2"><i>[S/MIME encrypted email preferred]</i></font>
</div>
</span></div>
<br>_______________________________________________<br>
openssl-users mailing list<br>
To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/mailman/listinfo/openssl-users</a><br>
<br></blockquote></div><br></div>