Simply, you can verify your certificate by: $ openssl verify -CAfile /path/to/root_cert your_cert
If you want to implement your verification codes, you can get the detail form openssl.c. On Wed, Sep 24, 2008 at 7:17 PM, Ajeet kumar.S <[EMAIL PROTECTED]> wrote: > Dear All, > > I want to verify the peer certificate (server certificate). For > that we need CA Certificate, Let me know we required ROOT CA certificate in > PEM format or in any other format, open ssl will support. > > Actually I called SSL_CTX_load_verify_locations() after that I called > SSL_CTX_set_verify(). > > But I saw response: certificate expire. But I saw in certificate it is > mention end validation date in 2014.Actually I converted .der format > certificate to .pem format using openssl utility. I tried .der certificate > directly but also not get success. Please let me know what is reason behind > it? How we can remove this error? > > > > Thank you. > > Regards, > > --Ajeet Kumar Singh > > > > > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]