On Tue, Apr 23, 2013 at 10:17:54AM -0700, Vijaya Venkatachalam wrote:

> So at the time of openssl connection establishment, the certificate is valid.
> But while the connection is still up, the certificate expires.

The certificate was valid at the time it was verified, this is sufficient.

> Is the application supposed to handle this or does openssl handle this?

Nothing needs to be done, so openssl does nothing.

> what should be the application behavior on certificate expiry?

It should keep going.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to