On 7/3/2019 4:30 PM, Viktor Dukhovni wrote:
On Jul 3, 2019, at 2:41 PM, Ken Goldman <kgoldman@xxxxxxxxxx> wrote:
That link points to the X509_dup page. It doesn't explain how to
build a DER sequence, does it?
The documentation is incomplete, and much RTFS is required, but it
and code pointers should get you started.
Here's what I have today.
I have a STACK_OF(ASN1_TYPE) to which I have added the issuer, validity,
and subject.
I can get the DER with i2d_ASN1_SEQUENCE_ANY.
I have a STACK_OF(X509_EXTENSION) to which I have added several extensions.
Questions:
1 - Is the an API sequence to add the extension STACK to the asn1_type
STACK?
2 - If not, is there an API sequence to get the DER for the extension
STACK. If so, I can append it and adjust the overall length.
3 - Is there a way to get the extension DER from a standard x509
certificate. If so, I can create it and pull out what I need.
4 - I'm trying to create DER that includes only issuer, validity,
subject, and extensions. It's not a standard X509 certificate. Is
there a better way?