Ah, very interesting.  I'll look into this one.  Seems like this would
be a very useful API for people.  Is it undocumented because nobody got
around to documenting it?  Or is it not really meant for public
consumption?  

Ed

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jens Doenhoff
Sent: Sunday, January 14, 2007 12:48 AM
To: [email protected]
Subject: Re: SSL_CTX_load_verify_locations on linux

Hi.

--On Friday, January 12, 2007 11:24:42 PM -0800 Edward Chan 
<[EMAIL PROTECTED]> wrote:

> Does anybody know where the trusted root certificates can be found on
> linux?

I think most often the default is /etc/ssl/certs/
But it might differ from distribution to distribution.

> Or is there a way I can use a default
> location without having to specify anything explicitly?

There is the function

int SSL_CTX_set_default_verify_paths(SSL_CTX*)

which adds the system-wide default certs path to the verify CApath (just

like SSL_CTX_load_verify_locations).
Unfortunately it's again one of those undocumented features ;)

Greetings,

Jens

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to