static bool IsCACertificate(X509* cert)
{
// (U) Initialize to false.
bool bRetVal = false;
BASIC_CONSTRAINTS* bsCA =
(BASIC_CONSTRAINTS*)X509_get_ext_d2i(cert, NID_basic_constraints,
NULL, NULL);
if (bsCA)
{
// (U) Could be a CA.
if (bsCA->ca)
{
// (U) Is a CA.
bRetVal = true;
}
else
{
// (U) Is NOT a CA. Return value set.
}
BASIC_CONSTRAINTS_free(bsCA);
}
else
{
// (U) Not a CA. Return value set.
}
// (U) return the results.
return bRetVal;
}
On Wed, Mar 29, 2017 at 10:17 AM, john gloster <glosterj9@xxxxxxxxx> wrote:
> Is there any API to retrieve the values of BasicConstraint extention of a
> certificate?
>
> Needed to find out whether it is a CA certificate and Path Length
> constraint.
>
> Could someone please provide me with sample code?
>
> Thanks.
>
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
