Hello, > I have a secure connection with a buffered BIO, and after the connection > is established, I want to verify (on th eClient) the Servers > certificate with a Root-CA. > How can I do this with openssl? With functions like:
cert = SSL_get_peer_certificate(ssl); X509_STORE_load_locations(CAcerts, file, NULL) X509_STORE_CTX_init(&ca_ctx, CAcerts, cert, NULL); X509_verify_cert(&ca_ctx); Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]