Re: Trusting a server certificate

2006-08-07 Thread Marek Marcola
Hello, > Wouldn't it be sufficient use SSL_CTX_set_verify_locations to point to > the server's certificate itself ? > > I thought the verification process would accept the certificate as long > as one of the certificates in the chain is trusted, even if it is the > last one. Or first, depending

Re: Trusting a server certificate

2006-08-07 Thread Alain Damiral
Wouldn't it be sufficient use SSL_CTX_set_verify_locations to point to the server's certificate itself ? I thought the verification process would accept the certificate as long as one of the certificates in the chain is trusted, even if it is the last one. Or first, depending on how you see it

Re: Trusting a server certificate

2006-08-07 Thread Marek Marcola
Hello, > Can anyone please help me on the below question? > > Thanks, > Ravi. > > On 8/3/06, ravi shankar <[EMAIL PROTECTED]> wrote: > Hi, > > I am new to openssl. How do we tell the SSL client to trust > the server certificate in advance using openssl APIs. For >

Re: Trusting a server certificate

2006-08-07 Thread ravi shankar
Hi,Can anyone please help me on the below question?Thanks,Ravi.On 8/3/06, ravi shankar <[EMAIL PROTECTED] > wrote:Hi,I am new to openssl. How do we tell the SSL client to trust the server certificate in advance using openssl APIs. For example, when we have the trusted root from the webserver, we ca

Trusting a server certificate

2006-08-03 Thread ravi shankar
Hi,I am new to openssl. How do we tell the SSL client to trust the server certificate in advance using openssl APIs. For example, when we have the trusted root from the webserver, we can use SSL_CTX_set_verify_locations function to tell the client to trust the server certificate if it matches the t