Hi, You can use X509V3_EXT_i2d(NID_crl_distribution_points, critical, sk) where sk is a STACK_OF(DIST_POINT) that you have previously filled with multiple URIs. Cheers, -Dave > On Nov 22, 2017, at 06:58, Dirk Menstermann <noadsplease@xxxxxx> wrote: > Hi, > > can anybody share example code to add more than 1 CRL distribution point to a > certificate? > > The below works only for one URI: > > X509_EXTENSION *ext = X509V3_EXT_conf_nid (NULL, &v3ctx, > NID_crl_distribution_points, (char*) "URI:http://exmaple.com/crl"); > X509_add_ext (certificate, ext, -1); > > Thanks a lot > Dirk > -- > openssl-users mailing list > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users