"D. K. Smetters" wrote:
> 
> 
> This is a patch to actually hand the user-supplied argument
> into calls to app_verify_callback. It affects the following 5
> files:
> 

I've no objections to this patch. As long as there's an argument there
we might as well use it.

There is a way to pass application specific data to the verify callback
without this patch. The X509_STORE_CTX makes use of the ex_data code to
pass a reference to the parents SSL context. Therefore by adding user
supplied data to the parent SSL structure the verify callback can make
use of it by first finding the SSL structure and then the ex_data
attached to it.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Gemplus: http://www.gemplus.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to