[openssl-dev] use of X.509 lookup methods, X509_OBJECT internal or opaque?

Salz, Rich rsalz at akamai.com
Fri May 6 17:26:35 UTC 2016


So let me try to summarize.

You need 
    X509 *X509_STORE_get_X509_by_subject(X509_STORE_CTX *vs, X509_NAME *name)
    X509_CRL *X509_STORE_get_X509_CRL_by_subject(X509_STORE_CTX *vs,  X509_NAME *name)
And replace the existing "X509_STORE_get_X509_by_subject"

We also need X590_OBJECT_new() and X509_OBJECT_free and X509_CRL *X509_OBJECT_get0_X509_CRL(X509_OBJECT *a).

Make sure the memory issues are addressed and avoid double-free. 

Right?



More information about the openssl-dev mailing list