Re: [openssl-users] SSL_set_verify with a context?

2016-10-27 Thread Ryan Pfeifle
rom: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Lei Kong Sent: Thursday, October 27, 2016 11:54 AM To: openssl-users@openssl.org Subject: Re: [openssl-users] SSL_set_verify with a context? I am using the following link ssl to my container structure, so is it possible to get ss

Re: [openssl-users] SSL_set_verify with a context?

2016-10-27 Thread Lei Kong
I am using the following link ssl to my container structure, so is it possible to get ssl from x509_ctx in verify_callback? SSL_set_app_data(ssl, this); int verify_callback(int preverify_ok, X509_STORE_CTX *x509_ctx); From: Lei Kong Sent: Thursday, Oct

[openssl-users] SSL_set_verify with a context?

2016-10-27 Thread Lei Kong
What I am trying to achieve is to allow some minor certificate chain validation errors, e.g. "CRL unavailable", based on my per-session configuration. I am think of using my verify callback to record the errors. void SSL_set_verify(SSL *s, int mode, int (*verify_callback)(int, X509_STORE_CTX *)