Re: Self-verifying names

[Sean Rhea]

On Dec 2, 2005, at 2:17 AM, Victor Duchovni wrote:

So I would change this to:

    int verify_callback(int preverify_ok, X509_STORE_CTX *ctx)
    {
        return 1;
    }

You can test this. Give the client or server a the wrong private key

you ignore the validity of the certificate chain.

and the right certificate and watch the SSL handshake fail, even though

Okay, will do.

Thanks again for all your help!
Sean
--
    Once, someone asked me what pleasure I took in riding for so long.
      'Pleasure?' I said. 'I don't understand the question.' I didn't
                  do it for pleasure. I did it for pain.
                            -- Lance Armstrong

PGP.sig
Description: This is a digitally signed message part