Hi, During SSL handshake with client cert auth, is openssl checking the key usages, such as digital signature, non-repudiation etc, for the client cert passed in (to make sure it is a valid client cert)? If it is, where is the code that does it? I cannot find it in X509_verify_cert().
Thanks, -binlu:q