Hi I searched for a functions that converts the notBefore and notAfter -validation time from a x509 cert into a unix struct tm or struct timeval. I ended up with implementing my own version. Is there any such a function ? I found many output functions...but i need to snprintf the time into a buffer char * buffer to pass this to a gui application (so BIO wont help unless i can write into a char *buffer....) The programs are unclear about what to check the CN name against. If the user supplies an ip...should i check the CN name against the reverse lookup or dont do a check at all ? And if the user supplies a hostname ? Should i do a gethostbyname and also compare against the aliases if the usersupplied hostname does not match ? (the example applications dont do this...but it would be nice i think). Is there a way to poll all ciphers that are supported by the peer from the peer ? skyper -- PGP: dig @segfault.net skyper axfr|grep TX|cut -f2 -d\"|sort|cut -f2 -d\; ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]