Re: Verifying private certificate before SSL connection

2009-03-07 Thread Liz Voss
Found the problem... The x509 pointer should not be free since the ssl_ctx will continue to use it. Thanks Liz Liz Voss wrote: Hello, I need to implement new requirement to verify private certificate before it is used for SSL/TLS connection. Basically I should not use certificate that is expi

RE: Verifying private certificate before SSL connection

2009-03-07 Thread Giang Nguyen
what do you mean "private certificate"? you mean the server wants to verify its own certificate before accepting connections? or the client wants to verify its own certificate before initiating connections? (i guess it doesn't matter either way, though.) assuming you have the CA certs and the