Re: SSL and Certificates verification

2010-06-20 Thread Massimiliano Pala
Hi Peter, actually I have not set the SSL_CTX_set_verify_depth(), I assume that if I don't, it would accept any depth, is that correct ? Also, for the SSL_CTX_set_verify(), I use the following: ssl_flags =| SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE; SSL_CTX_set_verify( ssl->ssl_ct

SSL and Certificates verification

2010-06-18 Thread Massimiliano Pala
Hi all, I have two issues when I am trying to verify the certificates from an SSL connection. In particular I have difficulties in understanding how to: - Add a set of certificates that are to be trusted (trust anchors..) - Add a set of certificates that might be needed to build the chain (no

SSL and Certificates verification

2010-06-18 Thread Massimiliano Pala
Hi all, I have two issues when I am trying to verify the certificates from an SSL connection. In particular I have difficulties in understanding how to: - Add a set of certificates that are to be trusted (trust anchors..) - Add a set of certificates that might be needed to build the chain (not

SSL and Certificates verification

2010-06-17 Thread Massimiliano Pala
Hi all, I have two issues when I am trying to verify the certificates from an SSL connection. In particular I have difficulties in understanding how to: - Add a set of certificates that are to be trusted (trust anchors..) - Add a set of certificates that might be needed to build the chain (n

SSL and Certificates verification

2010-06-17 Thread Massimiliano Pala
Hi all, I have two issues when I am trying to verify the certificates from an SSL connection. In particular I have difficulties in understanding how to: - Add a set of certificates that are to be trusted (trust anchors..) - Add a set of certificates that might be needed to build the chain (no

SSL and Certificates verification

2010-06-17 Thread Massimiliano Pala
Hi all, I have two issues when I am trying to verify the certificates from an SSL connection. In particular I have difficulties in understanding how to: - Add a set of certificates that are to be trusted (trust anchors..) - Add a set of certificates that might be needed to build the chain (not