Verifying private certificate before SSL connection

2009-03-08 Thread Liz Voss
I need to implement new requirement to verify private certificate before it is used for SSL/TLS connection. Basically I should not use certificate that is expired or revoked. I am working with OpenSSL 0.9.8i. I made function similar to what we are using to verify peer certificate but I am

Verifying private certificate before SSL connection

2009-03-07 Thread Liz Voss
Hello, I need to implement new requirement to verify private certificate before it is used for SSL/TLS connection. Basically I should not use certificate that is expired or revoked. I am working with OpenSSL 0.9.8i. I made function similar to what we are using to verify peer certificate but

RE: Verifying private certificate before SSL connection

2009-03-07 Thread Giang Nguyen
certificate before SSL connection Hello, I need to implement new requirement to verify private certificate before it is used for SSL/TLS connection. Basically I should not use certificate that is expired or revoked. I am working with OpenSSL 0.9.8i. I made function similar to what we are using

Re: Verifying private certificate before SSL connection

2009-03-07 Thread Liz Voss
Found the problem... The x509 pointer should not be free since the ssl_ctx will continue to use it. Thanks Liz Liz Voss wrote: Hello, I need to implement new requirement to verify private certificate before it is used for SSL/TLS connection. Basically I should not use certificate that is