Re: [openssl-users] Verify callback to ignore certificate expiry

2015-12-03 Thread Nounou Dadoun
hovni Sent: Thursday, December 03, 2015 9:08 AM To: openssl-users@openssl.org Subject: Re: [openssl-users] Verify callback to ignore certificate expiry On Thu, Dec 03, 2015 at 05:00:12PM +, Nounou Dadoun wrote: > Calling > X509_STORE_CTX_set_error(ctx, X509_V_OK); Is actually

Re: [openssl-users] Verify callback to ignore certificate expiry

2015-12-03 Thread Viktor Dukhovni
On Thu, Dec 03, 2015 at 05:00:12PM +, Nounou Dadoun wrote: > Calling > X509_STORE_CTX_set_error(ctx, X509_V_OK); > Is actually what I'm doing already but I was worried that it would then > ignore any other errors (e.g. bad signature etc.); No, because is error is reported separately, a

Re: [openssl-users] Verify callback to ignore certificate expiry

2015-12-03 Thread Nounou Dadoun
r Dukhovni Sent: Thursday, December 03, 2015 7:00 AM To: openssl-users@openssl.org Subject: Re: [openssl-users] Verify callback to ignore certificate expiry On Thu, Dec 03, 2015 at 06:01:36AM +, Nou Dadoun wrote: > Another quick question, I'm setting up a server ssl handshake on a device on

Re: [openssl-users] Verify callback to ignore certificate expiry

2015-12-03 Thread Viktor Dukhovni
On Thu, Dec 03, 2015 at 06:01:36AM +, Nounou Dadoun wrote: > Another quick question, I'm setting up a server ssl handshake on a device on > which the certificate verification will sometimes fail not because the > certificate is bad but because the time is not set properly on the device. > >

[openssl-users] Verify callback to ignore certificate expiry

2015-12-02 Thread Nounou Dadoun
Another quick question, I'm setting up a server ssl handshake on a device on which the certificate verification will sometimes fail not because the certificate is bad but because the time is not set properly on the device. I'm doing an ssl verify callback that is almost identical to one of the