Re: [BUG] X509_V_ERR_SUBJECT_ISSUER_MISMATCH weirdness

2000-09-22 Thread Bodo Moeller
On Fri, Sep 22, 2000 at 03:31:06PM +0200, Lutz Jaenicke wrote: I just tried Postfix/TLS 0.9.6 and found problems with certificate verification: 0.9.6 returned X509_V_ERR_SUBJECT_ISSUER_MISMATCH on a completely valid certificate. [...] Do you use a verify_callback? I'm working over a

Re: [BUG] X509_V_ERR_SUBJECT_ISSUER_MISMATCH weirdness

2000-09-22 Thread Dr S N Henson
Bodo Moeller wrote: On Fri, Sep 22, 2000 at 03:31:06PM +0200, Lutz Jaenicke wrote: I just tried Postfix/TLS 0.9.6 and found problems with certificate verification: 0.9.6 returned X509_V_ERR_SUBJECT_ISSUER_MISMATCH on a completely valid certificate. [...] Do you use a

Re: [BUG] X509_V_ERR_SUBJECT_ISSUER_MISMATCH weirdness

2000-09-22 Thread Lutz Jaenicke
On Fri, Sep 22, 2000 at 07:12:15PM +0100, Dr S N Henson wrote: Well the point of that stuff is to allow a log of all the extra checks being made. Things that were tolerated before (such as mismatched key ids) are not tolerated now. The callback will not be called with those extra checks