Moved to dev-tech-crypto. NSS has some limited certificate validation code, but you have to roll it in. You can take a look at either tstclnt or firefox code to see how to put something together. The firefox code is much more complex.
On Mon, 14 Oct. 2019, 12:37 R.Wieser, <address@not.available> wrote: > Hello all, > > I have some questions about the NSS3 API (AFAIK v3.14, as came with FF52 - > which is the last version which will run on XP), and am wondering if this > is > the correct place to ask questions about it. > > For example, although I can create an SSL connection, I have no idea how I > should verify a peers certificate (I assume inside the > SSL_AuthCertificateHook callback) > > Regards, > Rudy Wieser > > > _______________________________________________ > dev-security mailing list > dev-secur...@lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-security > -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto