Plot Lost <plot.l...@gmail.com> writes: > Hi, I'm trying to figure out how to check a certificate is valid > according to a chain of certificates. > > There are 3 certs in all, and they are all held as X509 data in memory, e.g. > > X509 *server_cert; > X509 *inter_cert; > X509 *root_cert; > > How can I check that 'server_cert' is authenticated by 'inter_cert', > and that in turn is authenticated by 'root_cert' ?
Stick them in an X509_STORE_CTX and call X509_verify_cert(). See apps/verify.c for an example. [...] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org