On Wed, Oct 7, 2009 at 4:09 AM, Konstantin Andreev <andr...@swemel.ru> wrote: > > I've checked this. SEC_ASN1_ANY saves tag-length prefix, but ignores tag > number, thus matches anything. > >> >> If SEC_ASN1_ANY doesn't work for you, the only solution I have is to >> re-encode the decoded SECItem. > > I think it's better to manually check the tag numbers, catched by > SEC_ASN1_ANY.
I agree. Also, don't you need to eventually decode this DER-encoded item? At that time the decoder will have to check the tag numbers. Or is it the recipient who will decode the DER-encoded item and you want to make sure you're sending the right kind of item? Wan-Teh -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto