Re: When to get peer certificate?

2001-01-10 Thread Lutz Jaenicke
On Mon, Jan 08, 2001 at 04:59:28PM +, Dr S N Henson wrote: > Lutz Jaenicke wrote: > > I just had a look into it. Maybe I will undertand it tomorrow. > > Once I understood it I will consider writing a manual page and update > > the example for the verify_callback... > > > > There is a manual

Re: When to get peer certificate?

2001-01-05 Thread Lutz Jaenicke
On Fri, Jan 05, 2001 at 08:31:23AM -0500, Ari Pirinen wrote: > Thank you for the prompt reply. This was actually my question, > how do I know when the handshake is completely finished? That is a good question :-) I would call SSL_connect() to establish the connection. Once SSL_connect() returns w

Re: When to get peer certificate?

2001-01-05 Thread Ari Pirinen
>On Fri, Jan 05, 2001 at 07:45:00AM -0500, Ari Pirinen wrote: >> When can I safely call SSL_get_peer_certificate? >> I am reading socket in non-blocking mode, and would like to >> know when I've read enough so that I can obtain the peer certificate. The >> reason is, as I've understood, I must che

Re: When to get peer certificate?

2001-01-05 Thread Lutz Jaenicke
On Fri, Jan 05, 2001 at 07:45:00AM -0500, Ari Pirinen wrote: > When can I safely call SSL_get_peer_certificate? > I am reading socket in non-blocking mode, and would like to > know when I've read enough so that I can obtain the peer certificate. The > reason is, as I've understood, I must check th

When to get peer certificate?

2001-01-05 Thread Ari Pirinen
When can I safely call SSL_get_peer_certificate? I am reading socket in non-blocking mode, and would like to know when I've read enough so that I can obtain the peer certificate. The reason is, as I've understood, I must check that CN matches the host name I requested to prevent MITM attacks. And