[openssl-dev] [PATCH] Declare/Implement ASN1_FUNCTIONS for NAME_CONSTRAINTS

[Dr. Stephen Henson]

On Sat, Jan 09, 2016, Paul Kehrer wrote:

> The ASN1 functions for NAME_CONSTRAINTS are not declared or implemented in the current OpenSSL releases. This is inconsistent with other extension structs and (I believe) means you either need to declare them yourself or attempt to build NAME_CONSTRAINTS using nconf functions. Below is a patch to current git master that adds support for these functions. 
> 
> If there's a preferred way to test that these macros behave as expected I'll be happy to add the tests to this patch.
> 

Why do you need the i2d/d2i functions? It is possible to encode and decode the
extension using X509_get_ext_d2i() and X509_add1_ext_i2d().

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org