>     o Steve is currently working on (in no particular order):
>        Proper (or at least usable) certificate chain verification.

I thought this is already working in 0.9.4.
SSL_CTX_use_certificate_chain_file
will load the cert chain for server cert chain. SSL_CTX_set_verify and
SSL_CTX_set_default_verify_paths will verify the client cert chain. What I
am
missing?

Thanks.
--Yunhong

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to