I was going to write a perl script that updates my ip at dyndns.org
using a secure connection, making use of openssl s_client to keep it
simple (and to avoid newbie mistakes).

I use the -CAfile to point to the Thawte root certificate I got from
thawte.com as dyndns.org uses a Thawte-signed certificate.

What I do exactly is:

openssl s_client -CAfile /path/to/thawte/certificate -connect
www.dyndns.org:443

Now this faciliates quite a lot of output and lots of "verify return:1"
lines, and in the end a block with SSL session id and "Verify return
code: 0 (ok)".

As I could not find any comment about the s_client's error codes I'm not
quite sure if and how I could detect the SSL connection has been
established and the server's certificate was accepted.

Does "no verify return codes except 1 and 0" mean everything is okay?

Thanks for reading and best regards,

Peter Asemann

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to