Re: When to get peer certificate?

2001-01-10 Thread Lutz Jaenicke
On Mon, Jan 08, 2001 at 04:59:28PM +, Dr S N Henson wrote: Lutz Jaenicke wrote: I just had a look into it. Maybe I will undertand it tomorrow. Once I understood it I will consider writing a manual page and update the example for the verify_callback... There is a manual page

When to get peer certificate?

2001-01-05 Thread Ari Pirinen
When can I safely call SSL_get_peer_certificate? I am reading socket in non-blocking mode, and would like to know when I've read enough so that I can obtain the peer certificate. The reason is, as I've understood, I must check that CN matches the host name I requested to prevent MITM attacks. And

Re: When to get peer certificate?

2001-01-05 Thread Lutz Jaenicke
On Fri, Jan 05, 2001 at 07:45:00AM -0500, Ari Pirinen wrote: When can I safely call SSL_get_peer_certificate? I am reading socket in non-blocking mode, and would like to know when I've read enough so that I can obtain the peer certificate. The reason is, as I've understood, I must check that

Re: When to get peer certificate?

2001-01-05 Thread Ari Pirinen
On Fri, Jan 05, 2001 at 07:45:00AM -0500, Ari Pirinen wrote: When can I safely call SSL_get_peer_certificate? I am reading socket in non-blocking mode, and would like to know when I've read enough so that I can obtain the peer certificate. The reason is, as I've understood, I must check that

Re: When to get peer certificate?

2001-01-05 Thread Lutz Jaenicke
On Fri, Jan 05, 2001 at 08:31:23AM -0500, Ari Pirinen wrote: Thank you for the prompt reply. This was actually my question, how do I know when the handshake is completely finished? That is a good question :-) I would call SSL_connect() to establish the connection. Once SSL_connect() returns