>From: owner-openssl-us...@openssl.org On Behalf Of 133mmx runner
>Sent: Wednesday, 24 July, 2013 10:04

>I also generated self signed ssl certificate for my server. My server 
>is in .Net platform and my client is using openssl API.

That means the client is code you wrote?

>My client also does not give any error with my self-signed server 
>certificate. Connection is establishing successfully. I think my client 
>is not validating server ssl certificate. Am i missing some configuration?

libssl by default does not validate and does not have a truststore.

Does your client code call SSL_CTX_set_verify to other than ..NONE 
before SSL_new, or SSL_set_verify before SSL_connect (or autoconnect),
and either SSL_CTX_load_verify_locations or _default_verify_paths ?

<snip previous>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to