What version of OpenSSL are you talking about?  check_pem() appeared 
in OpenSSL 0.9.5, and has been entirely unchanged since.  It 
currently contains the following lines:

        /* Allow normal certs to be read as trusted certs */
        if(!strcmp(nm,PEM_STRING_X509) &&
                !strcmp(name,PEM_STRING_X509_TRUSTED)) return 1;

which seems to correspond to your desires.  Can I ask you to check 
the problem again and see if there's something else wrong?

[[EMAIL PROTECTED] - Wed Jul 10 13:12:20 2002]:

[...]
> the Certifikate with OpenSSL later on the check_pem() funktion in
>    pem_lib.c
> didn't chek my TRUSTED CERTIFICATE seccessfully.
> I added the Lines:
> 
> /* Ich meine Trusted Certs sollten auch als Certs durchgehen */
>       if(!strcmp(nm,PEM_STRING_X509_TRUSTED) &&
>               !strcmp(name,PEM_STRING_X509)) return 1;
> 
> to the check_pem() funktion.

-- 
Richard Levitte
[EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to