On Tue, Apr 24, 2007, [EMAIL PROTECTED] wrote: > > I try to build a SSL server which performs client authentication. > But I cannot use SSL_CTX_load_verify_locations which has a CA file as > parameter. > (CA file is not located in the same machine) > Nevertheless, I succeeded having in my server the content of CA file in a > buffer > through API like PEM_read_bio_X509 and i2d_X509, d2i_x509... > > I am looking for a SSl API that loads the CA content in the SSL Context. > Can someone help me? >
You first retrieve the X509_STORE structure from the SSL_CTX structure using SSL_CTX_get_cert_store() and then add each cert with X509_STORE_add_cert(). Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]