On Sun, Jul 06, 2008, Konrad Kleine wrote:

> 
> Back to the point:
> 
> 0)    How can we get the X509-certificate store that we trust?
>       Is this correct?
>       
>       SSL_CTX * context = ...
>       X509_STORE * store = context->cert_store;
> 

You should call X509_CTX_get_cert_store() and not access the structure directly.

> 1)    How can we add a bunch of "X509*" to the X509-certificate-store
>       that we trust?
> 

X509_STORE_add_cert().

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to