data store that is attached to an X509 validation context.</p>

</li>
</ul>

<p>The following skeleton code can be used as a starting point:</p>

<pre><code>#include &lt;string.h&gt;
#include &lt;netdb.h&gt;
#include &lt;openssl/x509.h&gt;
#include &lt;openssl/x509v3.h&gt;

#define total_rights 25

/*
 * In this example, I will use a view of granted rights as a bit
 * array, one bit for each possible right.
 */
typedef struct your_rights {
    unsigned char rights[(total_rights + 7) / 8];
} YOUR_RIGHTS;

/*