gnutls_x509_crt_print omits AIA extension

Richard Moore rich at kde.org
Sat Jan 7 22:11:00 CET 2012


In the course of evaluating gnutls vs. openssl, I've spotted that
gnutls_x509_crt_print fails to display the AIA extension. Unknown
extensions are displayed properly (hexdump), so it's not simply that
the code doesn't understand it. This can be reproduced using the
supplied certtool:

certtool --infile gmail.pem --certificate-info

Just grab the cert from any valid site and you'll find the extension.
Compare the output with:

openssl x509 -text -in gmail.pem

(both the above commands were run using the pem of the gmail certificate).

Cheers

Rich.




More information about the Gnutls-devel mailing list