Re: Adding Multiple Root certificates in Openssl

Hi Mayur, I have used openssl program named verify like this: openssl verify -CApath /path/to/symbolic/links/folder -CAfile /path/to/PEM/encoded.file certificate.cer this coomand verifies the certificate stored in certifictae.cer against the certificates found in /path/to/symbolic/links/folder

Re: Adding Multiple Root certificates in Openssl

Hi Mayur Hope the links below help answer your question : http://www.openssl.org/docs/crypto/pem.html http://www.umich.edu/~x509/ssleay/x509_store.html http://www.openssl.org/docs/ssl/SSL_CTX_load_verify_locations.html# Best regards Michel Le 18/07/2011 05:38, Mayur Premi a écrit :

Re: Adding Multiple Root certificates in Openssl

Hi Ciprian, Thanks for the immediate reply . I have some questions on both the approaches suggested. You can create a file where you may concatenate all your trusted certificates in PEM format and use that file for verification. [Mayur]--- Is there any openSSL api which helps parsing

Adding Multiple Root certificates in Openssl

Hi , I am using openssl for signature verification of the files in my application. For supporting multiple root certificates , Is there a db or storage area[file] which openssl searches while finding the root of the passed input certificates ? I am using X509_Verify_cert api of openssl to

Re: Adding Multiple Root certificates in Openssl

Hi Mayur, You can create a file where you may concatenate all your trusted certificates in PEM format and use that file for verification. Another way is to store your trusted certificates in PEM format in filesystem and create a folder from where you create symbolic links to every certificate.