[openssl-dev] [PATCH] Declare/Implement ASN1_FUNCTIONS for NAME_CONSTRAINTS

[Paul Kehrer]

I can only plead ignorance. Those functions do indeed do what I need. With that I don't have any direct need for the d2i implementation, although it is still a bit odd for them to be defined on all the other extensions but not NAME_CONSTRAINTS.

Thanks for the help!

-Paul

On January 9, 2016 at 7:14:12 PM, Dr. Stephen Henson (steve at openssl.org) wrote:

On Sat, Jan 09, 2016, Paul Kehrer wrote:  

> The ASN1 functions for NAME_CONSTRAINTS are not declared or implemented in the current OpenSSL releases. This is inconsistent with other extension structs and (I believe) means you either need to declare them yourself or attempt to build NAME_CONSTRAINTS using nconf functions. Below is a patch to current git master that adds support for these functions.   
>  
> If there's a preferred way to test that these macros behave as expected I'll be happy to add the tests to this patch.  
>  

Why do you need the i2d/d2i functions? It is possible to encode and decode the  
extension using X509_get_ext_d2i() and X509_add1_ext_i2d().  

Steve.  
--  
Dr Stephen N. Henson. OpenSSL project core developer.  
Commercial tech support now available see: http://www.openssl.org  
_______________________________________________  
openssl-dev mailing list  
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160113/1bafdae8/attachment.html>