how to set flags in X509_NAME_ENTRY in OpenSSL 1.1.1

Blumenthal, Uri - 0553 - MITLL uri at
Tue Jun 18 21:51:31 UTC 2019

On 6/18/19, 5:44 PM, "openssl-users on behalf of Viktor Dukhovni" <openssl-users-bounces at on behalf of openssl-users at> wrote:

    We should
    perhaps provide getter/setter functions for the flags, or perhaps
    even a specific function for indicating the value is a bitstring,
    and how many bits it holds.  For now the ASN.1 string is not an
    opaque structure.

Considering how OpenSSL design evolved, I suspect that the time may come when this string would become opaque. Therefore, I suggest that getter/setter functions should be added.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5249 bytes
Desc: not available
URL: <>

More information about the openssl-users mailing list