I was going to write a perl script that updates my ip at dyndns.org using a secure connection, making use of openssl s_client to keep it simple (and to avoid newbie mistakes).
I use the -CAfile to point to the Thawte root certificate I got from thawte.com as dyndns.org uses a Thawte-signed certificate.
What I do exactly is:
openssl s_client -CAfile /path/to/thawte/certificate -connect www.dyndns.org:443
Now this faciliates quite a lot of output and lots of "verify return:1" lines, and in the end a block with SSL session id and "Verify return code: 0 (ok)".
As I could not find any comment about the s_client's error codes I'm not quite sure if and how I could detect the SSL connection has been established and the server's certificate was accepted.
Does "no verify return codes except 1 and 0" mean everything is okay?
Thanks for reading and best regards,
Peter Asemann
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]