mirleft / ocaml-x509

X509 (RFC5280) handling in OCaml
BSD 2-Clause "Simplified" License
52 stars 33 forks source link

support `unsupported` extensions #95

Closed hannesm closed 7 years ago

hannesm commented 7 years ago

this PR a) provides a function to extract the unsupported extension (for unknown/unhandled OIDs) b) fixes the raw_signature_hack to work with large certificates (where 4 bytes is not a good estimate for the length of the certificate) by peeking into the actual number. of course this is still a hack, but a good improvement over the existing one