On Mon, Oct 20, 2014 at 09:22:15PM +0200, Graham Leggett wrote:
> Can anyone confirm the order in which certs are returned by
> SSL_get_peer_cert_chain()?
Last time I read the code, I concluded that SSL_get_peer_cert_chain
returns the certificate chain exactly as sent by the remote server
in its TLS/SSL server HELLO message. The internally constructed
chain used in certificate validation is not (AFAIK/IIRC) available.
So this function is more useful for performing your own independent
chain validation than for examining the chain validated by OpenSSL.
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
