On 2012-09-24 20:55 +0000 (Mon), Nou Dadoun wrote: > Quick question: is there a simple openssl api call which will tell me > if an x509 certificate is self-signed? ... N
Will simply comparing the issuer and the subject DNs in the cert do what you need? Or do you need to check validity, the AuthorityKeyIdentifier extension, and suchlike? Also, you'll get more replies if you post a fresh message to the list when you have a fresh question, rather than replying to a mesasge deep in an unrelated topic chain that people might be ignoring. cjs -- Curt Sampson <c...@cynic.net> +81 90 7737 2974 It is easier to write an incorrect program than understand a correct one. --Alan Perlis, Epigrams on Programming (#7) ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org