Re: Re:Verify certificates

2009-04-07 Thread Victor Duchovni
On Tue, Apr 07, 2009 at 08:36:27PM -0400, Dave Thompson wrote: > The simple solution openssl does 'builtin' is to use CA-signed > certs (can be your own private CA) and a 'local trusted store' -- > a file or directory containing the (root) CA cert(s) you trust. > (And which it is presumed an att

RE: Re:Verify certificates

2009-04-07 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of AnneB > Sent: Monday, 06 April, 2009 05:32 > I have used (at client side, before SSL_connect) > SSL_set_verify SSL_VERIFY_PEER mode and I have put NULL > instead of verify callback in order to use the default > callback. But with SSL_get_err

Re: Re:Verify certificates

2009-04-06 Thread AnneB
Hello, Thank you for the solution. I have used (at client side, before SSL_connect) SSL_set_verify SSL_VERIFY_PEER mode and I have put NULL instead of verify callback in order to use the default callback. But with SSL_get_error I get SSL_ERROR_SSL. I use a self-signed certificate. Could be this