Hi Arno
Thank you for the input, this seems to work. Using the ICS ditro supplied certificates, I am getting the following debug print when applying your sample code in the Clients OnSslVerifyPeer event: Checking certificate Subject: /CN=Example CA/ST=Liege/C=BE/emailaddress...@overbyte.be/O=OverByte sprl Issuer: /CN=Example CA/ST=Liege/C=BE/emailaddress...@overbyte.be/O=OverByte sprl Verify result: self signed certificate in certificate chain Verify depth: 1 Checking certificate Subject: /CN=Example CA/ST=Liege/C=BE/emailaddress...@overbyte.be/O=OverByte sprl Issuer: /CN=Example CA/ST=Liege/C=BE/emailaddress...@overbyte.be/O=OverByte sprl Verify result: certificate has expired Verify depth: 1 Checking certificate Subject: /CN=Example CA/ST=Liege/C=BE/emailaddress...@overbyte.be/O=OverByte sprl Issuer: /CN=Example CA/ST=Liege/C=BE/emailaddress...@overbyte.be/O=OverByte sprl Verify result: certificate has expired Verify depth: 1 Checking certificate Subject: /C=BE/ST=Liege/O=OverByte sprl/CN=www.overbyte.be/emailaddress...@overbyte.be Issuer: /CN=Example CA/ST=Liege/C=BE/emailaddress...@overbyte.be/O=OverByte sprl Verify result: certificate has expired Verify depth: 0 Checking certificate Subject: /C=BE/ST=Liege/O=OverByte sprl/CN=www.overbyte.be/emailaddress...@overbyte.be Issuer: /CN=Example CA/ST=Liege/C=BE/emailaddress...@overbyte.be/O=OverByte sprl Verify result: certificate has expired Verify depth: 0 SockSslHandshakeDone, ErrCode = 0, Desc = No Error Received: Welcome to OverByte ICS TcpSrv Though the certificate seems to have expired I gather that it is being validated just fine otherwise, and the OnHandShakeDone event returns ErrCode = 0. I have some final questions though. How would the debug print have look had the certificated not been expired ? And how to tell if it was validated correctly, which properties should I check ? Once again, many thanks for helping me out, it is very appreciated ! Best regards Kurt -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
