Hell folks,

there seems to be a strange behavior with CA certificates
in SSL server:

I create a SSL_CTX for a server,
set the certificate and the private key
and add some CA certificates for client auth. with
SSL_CTX_add_client_CA().
(I don't set a server CA certificate,
 but in the list of client CA certificates are 2
 certificates with a DN that matches the issuer DN
 of the server certificate)

But opening a SSL conection,
my server still sends a CA certificate.

How can I prevent the server from sending the root CA ?

Bye

Goetz

--
Goetz Babin-Ebell, TC TrustCenter AG, http://www.trustcenter.de
Sonninstr. 24-28, 20097 Hamburg, Germany
Tel.: +49-(0)40 80 80 26 -0,  Fax: +49-(0)40 80 80 26 -126

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to