[openssl-dev] use of X.509 lookup methods, X509_OBJECT internal or opaque?

[Salz, Rich]

> You need
>     X509 *X509_STORE_get_X509_by_subject(X509_STORE_CTX *vs,
> X509_NAME *name)
>     X509_CRL *X509_STORE_get_X509_CRL_by_subject(X509_STORE_CTX *vs,
> X509_NAME *name) And replace the existing
> "X509_STORE_get_X509_by_subject"
> 
> We also need X590_OBJECT_new() and X509_OBJECT_free and X509_CRL
> *X509_OBJECT_get0_X509_CRL(X509_OBJECT *a).
> 
> Make sure the memory issues are addressed and avoid double-free.
> 
> Right?

"You need" is misleading.  These are new accessors needed  because the X509_OBJECT was made opaque.  In other words we did it :)