Hello,
> I have a secure connection with a buffered BIO, and after the connection 
> is established, I want to verify (on th eClient)  the Servers 
> certificate with a Root-CA.
> How can I do this with openssl?
With functions like:

cert = SSL_get_peer_certificate(ssl);
X509_STORE_load_locations(CAcerts, file, NULL)
X509_STORE_CTX_init(&ca_ctx, CAcerts, cert, NULL);
X509_verify_cert(&ca_ctx);

Best regards,
-- 
Marek Marcola <[EMAIL PROTECTED]>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to