how to set flags in X509_NAME_ENTRY in OpenSSL 1.1.1

Lisa Matias lisa.matias at
Tue Jun 18 04:19:41 UTC 2019

With OpenSSL version 1.1.1, my previously working code is now failing with
this error:

*error: dereferencing pointer to incomplete type ‘X509_NAME_ENTRY {aka
struct X509_name_entry_st}’*

Basically, I am trying to do the following...

X509_NAME_ENTRY *nameEntry;
nameEntry = X509_NAME_ENTRY_create_by_NID (&nameEntry, nid,
                        derTagToVType (tag), buffer, bufferLength);
*nameEntry->value->flags = specifiedFlags;*

And the error occurs at the last line above only with this newer version of
OpenSSL 1.1.1 and not with any of the older versions I have been using for
many years.

Unfortunately, I do not see any function in the openssl include files such
as "*X509_NAME_ENTRY_set_flags*(...)" which are available to use instead.

Does anyone know if there any alternative generic method in OpenSSL 1.1.1
to set flags for a X509_NAME_ENTRY, which is independent of the ASN.1 type
of the X509_NAME_ENTRY?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the openssl-users mailing list