Hi.

I have got the following problem in my application:

- I have added an  own callback function for certificate  verification,
which will let the handshake fail if the verification fails.
- But if a verification process fails, I need the presented server
certificate outside the callback function.
- The problem is, that the function SSL_get_peer_certificate() returns
NULL, if the handshake failed, even if the server has sent a certificate.

So is there an easy way, to pass on the tested certificate from the
callback function?

I've tried to store the certificate in an extra data field with
SSL_set_ex_data() and read it out with SSL_get_ex_data. That solution
worked fine, until I compiled OpenSSL with thread support.
Is there a special way of using SSL_set_ex_data() in a multi-threaded
application?

Thanks,

Roman

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to