Hello,

We know that we can add extra certs using:
    SSL_CTX_add_extra_chain_cert

However, how to achieve the opposite (removing certs)? Currently we
are using code like (_ctx is an ssl_ctx_st*):
    if(_ctx->extra_certs) {
        sk_X509_pop_free(_ctx->extra_certs, X509_free);
        _ctx->extra_certs = 0;
    }
We would like to know, if OpenSSL provides a public API to clear all
added extra certs?

Thank you and best regards,
Aloysius
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to