> -----Original Message-----
> From: Mounir IDRASSI
>
> Personally I don't think it is possible currently without a change to
> OpenSSL internals or the use of the verify callback. That
> being said, I
> remember vaguely a post by Dr Stephen Henson related to this where he
> mentioned a planned change in this direction, but I can't
> find a link to it.

Yes, Mounir, you remember correctly.

Matthias, search the archives for a thread named 'Terminate chain at 
intermediate certificate'. Stephan's post that Mounir cites, is from last 
year's 11th November.

HTH,
Patrick Eisenacher
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to