Re: Do I need to do anything special to get certificate validation to use a CDP?

2007-12-24 Thread Cong Zhang
t think OpenSSL has API to do this job. Zhang Cong On Dec 24, 2007 9:55 PM, Bruce Keats <[EMAIL PROTECTED]> wrote: > Thank you. Is there a function within the API that can do the CRL > extraction from the CDP(s)? > > Bruce > > > > On Dec 22, 2007

Re: Do I need to do anything special to get certificate validation to use a CDP?

2007-12-22 Thread Cong Zhang
Hi, AFAIK, OpenSSL has no code to retrieve the CRL from CRL distribution points. The CRL retrieve and update should be done by yourself. However, by putting a PEM encoded CRL to CApath will make OpenSSL load this CRL correctly. To use CRL, you may retrieve and check CRL at verify_callback, or use

Re: Can OpenSSL use Windows Certificate store?

2007-11-23 Thread Cong Zhang
Hi, I tried to use Windows CryptoAPI functions to dump the certificates to a PEM file. OpenSSL seems is able to load the PEM file and works correctly. The code is like this: int _tmain(int argc, _TCHAR* argv[]) { if ( argc == 1 ) { std::cout << "certsync [store]" << endl; return 0;