Feature request : SSL_CTX_set_verify

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Feb 8, 2010 at 2:30 PM, Klaus Darilion
<klaus.mailinglists at pernau.at> wrote:
>
>
> Am 08.02.2010 13:15, schrieb Nanang Izzuddin:
>>
>> Hi Pierre,
>>
>> Just want to revisit this topic again :)
>>
>> First, let me clarify that the issue added in ticket #1032 is about
>> giving a chance for application to "override" negative result in
>> certificate verification, not really the main idea you've suggested,
>> which was about exporting/escalating OpenSSL verification callback in
>> its 'native' way (including leaking some OpenSSL data), did I get it
>> wrong?
>>
>> A reason behind 'ignoring' your main idea was that the use-case
>> samples you've given can be handled by the existing mechanism, e.g:
>> - certificate info could be queried via pj_ssl_sock_get_info().
>> - application can check whether certificate has been received by
>> calling pj_ssl_sock_get_info() in on_connect_complete().
>
> Is it possible to use the on_connect_complete() callback from pjsua-API?
>

I think we'll have to add it then. But the question still remains,
will it be sufficient to capture your use case?

Cheers
 Benny



[Index of Archives]     [Asterisk Users]     [Asterisk App Development]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [Linux API]
  Powered by Linux