> -----Original Message----- > From: Mounir IDRASSI > > Personally I don't think it is possible currently without a change to > OpenSSL internals or the use of the verify callback. That > being said, I > remember vaguely a post by Dr Stephen Henson related to this where he > mentioned a planned change in this direction, but I can't > find a link to it.
Yes, Mounir, you remember correctly. Matthias, search the archives for a thread named 'Terminate chain at intermediate certificate'. Stephan's post that Mounir cites, is from last year's 11th November. HTH, Patrick Eisenacher ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org