Hi list!

I'm currently implementing support for CRLs in our system. The CRLs are 
signed by the same CA that issued the certificate of the peer. Therefore, 
to verify the CRL, I need to find the certificate of the parent of the peer 
that I'm communicating with.

During an SSL session, I can use SSL_get_peer_certificate() to get to the 
certificate of the peer. Is there a clever way I can get to its parent's 
certificate?

The chain that SSL_get_peer_cert_chain() returns, doesn't seem to include 
the entire chain, in case the peer's parent is self-signed. Is this correct?

Regards,

Mats Nilsson

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to