Re: rpki-client: better handling of X509_get_ext_d2i() errors

2023-06-20 Thread Job Snijders
On Tue, Jun 20, 2023 at 07:50:19PM +0200, Theo Buehler wrote: > X509_get_ext_d2i() is one of those very special OpenSSL interfaces... > > It can return NULL for various reasons. If it returns NULL and crit is > not -1, something bad happened. If crit is -2, multiple extensions with > the same OID

rpki-client: better handling of X509_get_ext_d2i() errors

2023-06-20 Thread Theo Buehler
X509_get_ext_d2i() is one of those very special OpenSSL interfaces... It can return NULL for various reasons. If it returns NULL and crit is not -1, something bad happened. If crit is -2, multiple extensions with the same OID as the one corresponding to the nid were found (this is not allowed per