On Sat, Feb 11, 2006, Alberto Alonso wrote:

> What would be the equivalent to do the root certificate to
> be used during validation?
> 
> Basically the next step for me is not having to have the
> SSL_CTX_load_verify_locations call.
> 
> The SSL_CTX_set_cert_store seems to be what I want, but I don't
> find documentation on how to create the store in the first place.
> 

You don't have to create one. That is done already.

You can call SSL_CTX_get_cert_store() to retrieve it.

Once you have it you simply call X509_STORE_add_cert().

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to