Difference between revisions of "How to handle OpenSSL and not get hurt"
| Line 1: | Line 1: | ||
| − | |||
== Stuff you wished to know before you every needed to touch the OpenSSL library == | == Stuff you wished to know before you every needed to touch the OpenSSL library == | ||
| Line 5: | Line 4: | ||
Use the source! When you're looking for anything particular or specialized and you really wish to know how OpenSSL is handling this: '''Use the Source!''' | Use the source! When you're looking for anything particular or specialized and you really wish to know how OpenSSL is handling this: '''Use the Source!''' | ||
| + | |||
| + | |||
| + | == What does that library call really do? == | ||
| + | |||
| + | There exists '''X509_STORE_CTX_get_chain(X509_STORE_CTX *ctx)''' and '''X509_STORE_CTX_get1_chain(X509_STORE_CTX *ctx)'''. The difference is that the '''X509_STORE_CTX_get_chain()''' will only return a reference to the certificate chain (type '''STACK_OF (X509) *''') from within the X509_STORE_CTX structure and the '''X509_STORE_CTX_get1_chain()''' will make a duplicate certificate chain that will need to be '''free()''''d. | ||
Revision as of 08:53, 30 September 2009
Stuff you wished to know before you every needed to touch the OpenSSL library
On the web OpenSSL is poorly documented and even the book Network Security with OpenSSL doesn't touch the advanced inner workings of the library. There are more gems in the documentation of the OpenSSL source tarballs.
Use the source! When you're looking for anything particular or specialized and you really wish to know how OpenSSL is handling this: Use the Source!
What does that library call really do?
There exists X509_STORE_CTX_get_chain(X509_STORE_CTX *ctx) and X509_STORE_CTX_get1_chain(X509_STORE_CTX *ctx). The difference is that the X509_STORE_CTX_get_chain() will only return a reference to the certificate chain (type STACK_OF (X509) *) from within the X509_STORE_CTX structure and the X509_STORE_CTX_get1_chain() will make a duplicate certificate chain that will need to be free()'d.
