Hi All,

I am writing a server that needs to periodically rotate its SSL certificate, with the cert being passed over a network. I would like to write an authentication function so that my server can verify that the incoming certificate was signed by the expected authority and that it is within date. I can do this with the x509 command in the openssl command-line tool, passing the -enddate and -issuer arguments, but I was wondering if there might be a way to do this using an API. I looked at the manual pages and archives of this list, but I did not see anything. If anyone knows of a good way to do this, I'd be grateful if you could point me to it.

Thank you,

David
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to