After the accept do the following... BTW...are you using the pkcs11 engine? I am trying to find out the patch for 9.8g version.

        sbio=BIO_new_socket(socketFd, BIO_NOCLOSE);

        // Create a new SSL structure
        ssl=SSL_new(ctx);

        // Connect the read and write BIOs
        SSL_set_bio(ssl, sbio, sbio);
/* Wait for the client to initiate the TLS/SSL handshake. A
        ** return code of 1 indicates that the connection was successfully
        ** established.
        */

        printf("Wait for Client to initiate the handshake\n");
        retCode = SSL_accept(ssl);


Anri Lau wrote:
Hello guys,

I setting the CRL path for SSL by SSL_context, but it is not useful.

In manual page SSL_connection and SSL_accept are used to inited a handshake and SSL_do_handshake() perform a handshake

SSL_do_handshake should be called explicitly after SSL_accept/SSL_connection is called?

does SSL_connection/SSL_accept do the work of validate the certificate of client or server!


Thank you very much!

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to