gnutls_x509_crt_print omits AIA extension

Nikos Mavrogiannopoulos nmav at
Sun Jan 8 11:03:43 CET 2012

On 01/07/2012 10:11 PM, Richard Moore wrote:

> In the course of evaluating gnutls vs. openssl, I've spotted that
> gnutls_x509_crt_print fails to display the AIA extension. Unknown
> extensions are displayed properly (hexdump), so it's not simply that
> the code doesn't understand it. This can be reproduced using the
> supplied certtool:
> certtool --infile gmail.pem --certificate-info
> Just grab the cert from any valid site and you'll find the extension.
> Compare the output with:
> openssl x509 -text -in gmail.pem
> (both the above commands were run using the pem of the gmail certificate).

Which version of gnutls did you test? I just tested and the provided information
are the same.


More information about the Gnutls-devel mailing list