Certificates with DN UniqueIdentifier

Hi,

I am programming with cryptlib 3.3.3 on MS Win / VC++ 2003. Usually, 
I load 
any cert in DER format with this function:

cryptImportCert( bufPtr, count, CRYPT_UNUSED, &cryptCert );

This works fine with almost any certificate, but when I use a certificate 
with the DN UniqueIdentifier in the "Subject" and/or the "Issuer" this 
function fails. Indeed when debuging my code, I realize that it breaks 
in the function "readAVA" part of the file "cert/dn_rw.c", lines 79-81:

FILE: dn_rw.c

static int readAVA( INOUT STREAM *stream, 
...
79:	tag = peekTag( stream );
80:	if( cryptStatusError( tag ) )
81:		return( tag );
	if( tag == BER_BITSTRING )
...

I use this kind of certificates in several services with no problem. 
These certificates are issued by the same software.

An example of this type of certificates is as follows:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Can someone give me a clue that what is bad with this certificate?.
Is this a problem/bug of cryptlib?

Sincerely,
M.



      


_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.