ASN1_STRING type is now opaque

Previous posts about the upcoming OpenSSL 4.0 release:

  1. [removing ENGINE code](https://openssl-library.org/post/2025-12-18-remove-engines)
  2. [removing deprecated functions for creating or modifying custom METHODS](https://openssl-library.org/post/2026-02-03-remove-methods)
  3. [no longer registering a function via atexit function](https://openssl-library.org/post/2026-03-10-remove-atexit)
  4. [adding ECH support](https://openssl-library.org/post/2026-03-11-ech)
  5. [removing SSLv3 and SSLv2 Client Hello](https://openssl-library.org/post/2026-04-07-ssl3)

## Summary

The ASN1_STRING structure can [no longer be accessed
directly](https://docs.openssl.org/4.0/man7/ossl-guide-migration/#the-
asn1_string-type-is-now-opaque). Instead, accessor functions must be used.

While these accessor functions have been available since OpenSSL 1.0.1, this
change is being made now to enable future work improving X509 memory
efficiency. Requiring accessor functions will allow ASN1 strings to be stored
as pointers to data in read only memory instead of making duplicate copies.



URL: https://openssl-library.org/post/2026-04-13-asn1_string/

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/d7c31bcd-14a0-40db-bd5c-ea034c6906db%40localhost.