Found the problem...
The x509 pointer should not be free since the ssl_ctx will continue to
use it.
Thanks Liz
Liz Voss wrote:
Hello,
I need to implement new requirement to verify private certificate
before it is used for SSL/TLS connection.
Basically I should not use certificate that is expi
what do you mean "private certificate"? you mean the server wants to verify its
own certificate before accepting connections? or the client wants to verify its
own certificate before initiating connections? (i guess it doesn't matter
either way, though.)
assuming you have the CA certs and the