CODEWITHSUNDEEP
c++sslopensslx509certificatex509
Dracke
Dracke

Reputation: 651

Programmatically get the issuer certificate C++

I am programming a certificate revocation check using CRL that is present in the verified certificate. For the check, I also need the issuer certificate.

Where can I find the URL address for the issuer?

I know that I can get the name of the issuer using this function:

X509_NAME *X509_get_issuer_name(const X509 *);

But I need to get the url, from where I can get the issuer certificate to call X509_CRL_verify(X509_CRL *, EVP_PKEY *) function.

Upvotes: 1

Views: 2407

Answers (1)

Steffen Ullrich
Steffen Ullrich

Reputation: 123531

There is no such thing as a URL for an issuer and I don't see why you need one. For CRL checks you need instead the CRL distribution points which are contained in the original certificate. See C++ Check CRL For Revocation for code which is using X509_get_ext_d2i with NID_crl_distribution_points to extract these information from the certificate.

Upvotes: 1

Related Questions