Re: [openssl-dev] Certificate chain issue.

2016-08-28 Thread asmarner
I was referring to "Data before the encapsulation boundaries are permitted, and parsers MUST NOT malfunction when processing such data." Wondering whether we could consider "?" as the data. On Sunday, August 28, 2016 8:40 PM, "Salz, Rich" wrote: #yiv4319403386

[openssl-dev] Certificate chain issue.

2016-08-28 Thread asmarner
I am using SSL_CTX_use_certificate_chain_file() to load the certificate chain. Due to some issue, my certificate chain file has the following (please look at the stray character "?") -BEGIN CERTIFICATE- Base-64 data of server -END CERTIFICATE- ?-BEGIN CERTIFICATE-

[openssl-dev] SSL_CTX_use_certificate_chain_file()

2016-08-26 Thread asmarner
Hi,   Is there any negative impact ofusing SSL_CTX_use_certificate_file() and SSL_CTX_use_certificate_chain_file() together?   My application loads thecertificate using SSL_CTX_use_certificate_file()and loads the complete chain using SSL_CTX_use_certificate_chain_file().   Theapplication

[openssl-dev] CA chain.

2016-07-28 Thread asmarner
Hi, I am new to SSL stuff. I was wondering whether the CA chain of a certificate can be changed. Let say the initial chain is Server->Intermediate CA1->Intermediate CA2->Root CA and during renewal we have Server->Root CA Sent from Yahoo Mail. Get the app-- openssl-dev mailing list To