Hi,
In my ssl client program I set
SSL_CTX_set_verify(sslContext, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE,
verify_callback);
During handshake, Server sends a self-signed certificate to the Client.
Clients verify_callback gets called two times. My verify_callback must
prompt the user to accept a new certificate that is not in the clients trust
store.
Why does the verify_callback getting called twice? When should the
verify_callback prompt the user?
Appreciate any help on this.
Thanks,
Nag
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]