Re: isakmpd & ca cert woes

[Hakan Olsson <ho@crt.se>]

FYI, I just committed an update to isakmpd's x509_cert_validate() to use
the function below in case of failure. It should be more verbose now.

/H

On Fri, 13 Jul 2001, Shoichi Sakane wrote:

> > The validation check happens deep inside X509_verify_cert() in libcrypto.
> > It should be possible to add some verbosity, but OpenSSL's error reporting
> > functions make my head spin.
>
> X509_verify_cert_error_string() might help you.
>

--
Håkan Olsson <ho@crt.se>        (+46) 708 437 337     Carlstedt Research
Unix, Networking, Security      (+46) 31 701 4264        & Technology AB