Simple cert verification code saught.

2005-01-20 Thread Naoki
Hi all, I'm writing a little code snippet to just check the validity of a certificate ( and the entire chain preferably ). Whilst using the example code it's easy enough to make the connection and setup a session but being a newbie I'm not clear on what/how I should verify the certs. So far.

Re: Simple cert verification code saught.

2005-01-20 Thread Naoki
Well, I just added this : SSL_get_verify_result( ssl ); And with the result being one of the return codes listed here : http://www.openssl.org/docs/apps/verify.html#DIAGNOSTICS Looks like I've answered myself :) On Fri, 2005-01-21 at 14:04 +0900, Naoki wrote: Hi all, I'm writing a little

Re: Simple cert verification code saught.

2005-01-20 Thread Naoki
Errm. Except that returns a long, how do I map that to the definitions listed in include/openssl/x509_vfy.h in order to return something more useful than '20' ? On Fri, 2005-01-21 at 14:13 +0900, Naoki wrote: Well, I just added this : SSL_get_verify_result( ssl ); And with the result being

Re: Simple cert verification code saught.

2005-01-20 Thread Naoki
Sorry, just worked it out... again... X509_verify_cert_error_string(). On Fri, 2005-01-21 at 14:13 +0900, Naoki wrote: Well, I just added this : SSL_get_verify_result( ssl ); And with the result being one of the return codes listed here :