Re: How use the puzzle of CRL in ssl connection

2008-02-15 Thread David Hostetter
After the accept do the following... BTW...are you using the pkcs11 engine? I am trying to find out the patch for 9.8g version. sbio=BIO_new_socket(socketFd, BIO_NOCLOSE); // Create a new SSL structure ssl=SSL_new(ctx); // Connect the read and write BIOs

How use the puzzle of CRL in ssl connection

2008-02-15 Thread Anri Lau
Hello guys, I setting the CRL path for SSL by SSL_context, but it is not useful. In manual page SSL_connection and SSL_accept are used to inited a handshake and SSL_do_handshake() perform a handshake SSL_do_handshake should be called explicitly after SSL_accept/SSL_connection is called? does

Re: How use the puzzle of CRL in ssl connection

2008-02-15 Thread Anri Lau
I have do some work on pkcs11 engine but not on 9.8g just 9.8f. what i want to know is after retCode = SSL_accept(ssl); if the SSL_do_handshake() should be invoked explicitly. Does the SSL_accept/SSL_connect has done the work of SSL_do_handshake(). thanks a lot for you quickly response! On

Re: How use the puzzle of CRL in ssl connection

2008-02-15 Thread Dr. Stephen Henson
On Fri, Feb 15, 2008, Anri Lau wrote: Hello guys, I setting the CRL path for SSL by SSL_context, but it is not useful. In manual page SSL_connection and SSL_accept are used to inited a handshake and SSL_do_handshake() perform a handshake SSL_do_handshake should be called explicitly