Hi,

I have some questions on the verification callback function. By the way, I'm
using the SSL_VERIFY_PEER mode.

 1. Is it best practice to put all the certificate checks in this callback
function?
 2. Is it so that the number of times this function is called is equal to
the verification depth used?
 3. If so, how do I get to know the verification depth at runtime? I'll be
more specific on this : if I wanted to add an extra check only for the last
certificate in the chain (that of the client), how would I do this?

Hope my questions make sense.

  Anyways, much thanx in advance,
  Robin


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to