Re: passing CA bundle as buffer, instead of file path, to X509_STORE_CTX_ functions

[J Decker <d3ck0r@xxxxxxxxx>]

You can use a BIO_new( BIO_s_mem() ) to feed the memory through BIO_writeand  PEM_read_bio_X509

something like ...

https://github.com/d3x0r/SACK/blob/master/src/netlib/ssl_layer.c#L780

On Tue, Sep 4, 2018 at 8:07 AM Eli Golosovsky <ilya.golosovsky@xxxxxxxxx> wrote:

Is there an option, in OpenSSL 1.1.1, to load a CA bundle from memory (buffer / string) instead of loading it from a file?

From my experience, loading a CA bundle can be achieved by using the X509_STORE_CTX_ functions, on an X509_STORE_CTX object, representing the certificate, and finalizing with X509_verify_cert. But I know of no way to load the CA bundle not from disk. 

Thanks in advance,

Ilya Golosovsky

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users