Simply, you can verify  your certificate by:

$ openssl verify -CAfile /path/to/root_cert  your_cert

If you want to implement your verification codes, you can get the detail form
openssl.c.


On Wed, Sep 24, 2008 at 7:17 PM, Ajeet kumar.S
<[EMAIL PROTECTED]> wrote:
> Dear All,
>
>             I want to verify the peer certificate (server certificate). For
> that we need CA Certificate, Let me know we required ROOT CA certificate in
> PEM format or in any other format, open ssl will support.
>
> Actually I called SSL_CTX_load_verify_locations() after that I called
> SSL_CTX_set_verify().
>
>  But I saw  response: certificate expire. But I saw in certificate it is
> mention end validation date in 2014.Actually I converted .der format
> certificate to .pem format using openssl utility. I tried .der certificate
> directly but also not get success. Please let me know what is reason behind
> it? How we can remove this error?
>
>
>
> Thank you.
>
> Regards,
>
> --Ajeet  Kumar  Singh
>
>
>
>
>
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to