Hi!

>From the SSL_CTX_load_verify_locations manpage:

If CApath is not NULL, it points to a directory containing CA certificates in
PEM format. The files each contain one CA certificate. The files are looked up
by the CA subject name hash value, which must hence be available. If more than
one CA certificate with the same name hash value exist, the extension must be
different (e.g. 9d66eef0.0, 9d66eef0.1 etc). The search is performed in the
ordering of the extension number, regardless of other properties of the
certificates. Use the c_rehash utility to create the necessary links. 

Regards,

//oscar

Glenn wrote:
> 
> I have a trusted cert, say "c:\path\file.pem" on
> Windows FAT32. Using
> SSL_CTX_load_verify_locations(ctx,"c:\\path\\file.pem",NULL),
> I managed to verify the peer cert correctly.
> 
> However, using
> SSL_CTX_load_verify_locations(ctx,NULL,"c:\\path\\"),
> the verification failed. There is only one file in
> that folder.
> 
> May I know how should I make the path works? Thanks!
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
> http://geocities.yahoo.com/ps/info1
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to