Plot Lost <plot.l...@gmail.com> writes:

> Hi, I'm trying to figure out how to check a certificate is valid
> according to a chain of certificates.
>
> There are 3 certs in all, and they are all held as X509 data in memory, e.g.
>
> X509 *server_cert;
> X509 *inter_cert;
> X509 *root_cert;
>
> How can I check that 'server_cert' is authenticated by 'inter_cert',
> and that in turn is authenticated by 'root_cert' ?

Stick them in an X509_STORE_CTX and call X509_verify_cert().  See
apps/verify.c for an example.

[...]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to