In message <[EMAIL PROTECTED]> on Wed, 4 
Dec 2002 23:02:21 -0500 (EST), Rich Salz <[EMAIL PROTECTED]> said:

rsalz> > author has explicitely asked for a default certificate, through something
rsalz> > like 'X509_LOOKUP_load_file(lookup,NULL,X509_FILETYPE_DEFAULT)'.  Note
rsalz> > the last argument.
rsalz> 
rsalz> Sure, but if they told you a filename and it contains garbage than I think
rsalz> it's an error.  If they told you a filename and it doesn't exist, then
rsalz> I htink that's an error.  If they don't give you a filename, then you're
rsalz> on your own to find a default.

If the file pointed at with SSL_CERT_FILE is faulty in any way, the
code will fall back to the built-in default.  If that fails, an error
is generated.  How much does that differ from what you said?

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
                    \      SWEDEN       \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to