* Ali Jawad:

> Thanks Florian I did go ahead and parsed them, I last question please,
> in a chain sometimes only the intermediate certificates are returned
> and at other times the intermediate chains and the root certificate is
> returned, at least based on digcerts ssl testing utility, how can I
> differ between an intermediate certificate and a root certificate ?

It depends on the set of certificates sent by the server.  The root
certificate is often omitted for performance reasons.  I don't know if
there is an OpenSSL API which gives you the chain of certificates
which was actually used for validation.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to