* Ali Jawad: > Thanks Florian I did go ahead and parsed them, I last question please, > in a chain sometimes only the intermediate certificates are returned > and at other times the intermediate chains and the root certificate is > returned, at least based on digcerts ssl testing utility, how can I > differ between an intermediate certificate and a root certificate ?
It depends on the set of certificates sent by the server. The root certificate is often omitted for performance reasons. I don't know if there is an OpenSSL API which gives you the chain of certificates which was actually used for validation. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org