1 Reply by smith.jhn182

(2 replies, posted in wolfSSL)

Thanks,

I think I managed what I needed by using the CertManager and DecodedCert functions

Go to forum: wolfSSL

2 Topic by smith.jhn182

(2 replies, posted in wolfSSL)

As a client I'm trying to validate a certificate chain and if it fails I use a callback to do some of my own validation on the root certificate.

I'm using wolfSSL_CTX_set_verify to setup my callback and i'm using wolfSSL_setCertCbCtx to pass in my own arguments in order to perform some minor validation of the root cert and if it matches what I want then I load specific cert from the system or a buffer.

I don't want to use any openssl compatibility code so I'm not using OPENSSL_ALL, OPENSSL_EXTRA, etc. and thus I can't use wolfSSL_X509_verify_cert.

Is there a way to have wolfssl attempt to re-validate the chain now that I have loaded a cert into my ssl context?

Go to forum: wolfSSL