..@hotmail.com
To: openssl-users@openssl.org
Subject: RE: Question regarding PKCS7_verify
Date: Thu, 10 Mar 2011 13:49:08 -0800
Thanks for quick response.
Adding -purpose any surely works.
I had to change my code to get certs from PKCS7 structure and create X509 store
context and set purpose
.
Currently openssl version I am using is 0.9.8g.
I remember it was working with 0.9.7. Or it never checked or ignored purpose.
Thanks for your help.
Prkj
> Date: Thu, 10 Mar 2011 22:05:03 +0100
> From: st...@openssl.org
> To: openssl-users@openssl.org
> Subject: Re: Question regarding
On Thu, Mar 10, 2011, prk j wrote:
>
> Hi,
>
> I am new at using openssl API's. Here is my situation.
>
> I have following set of certificates with X509 extensions defined for code
> signing in PKCS#7 format.
>
> Root CA - Key usage (critical): Certificate Sign, CRL Sign
> CVC Sub- CA - Key u
Hi,
I am new at using openssl API's. Here is my situation.
I have following set of certificates with X509 extensions defined for code
signing in PKCS#7 format.
Root CA - Key usage (critical): Certificate Sign, CRL Sign
CVC Sub- CA - Key usage (critical): Certificate Sign, CRL Sign
CVC cert - K