Oscar Jacobsson wrote:
> 
> Hi!
> 
> >From the SSL_CTX_load_verify_locations manpage:
> 
> If CApath is not NULL, it points to a directory containing CA certificates in
> PEM format. The files each contain one CA certificate. The files are looked up
> by the CA subject name hash value, which must hence be available. If more than
> one CA certificate with the same name hash value exist, the extension must be
> different (e.g. 9d66eef0.0, 9d66eef0.1 etc). The search is performed in the
> ordering of the extension number, regardless of other properties of the
> certificates. Use the c_rehash utility to create the necessary links.
> 
> Regards,
> 
> //oscar
> 
> Glenn wrote:
> >
> > I have a trusted cert, say "c:\path\file.pem" on
> > Windows FAT32. Using
> > SSL_CTX_load_verify_locations(ctx,"c:\\path\\file.pem",NULL),
> > I managed to verify the peer cert correctly.
> >

Only problem is that this is on Windows and the standard c_rehash wont
work.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Gemplus: http://www.gemplus.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to