OpenSSL, Debian a default CApath

[Pavel Kankovsky]

On Wed, 1 Jun 2005, Vaclav Stepan wrote:

> Kdyz rucne specifikuji CApath:
> openssl s_client -CApath /etc/ssl -connect kamsi:https
[...]
> V openssl.cnf ani man strankach nic jako CApath neni. Co s tim?

Kterou manualni stranku myslite?

Na strance k s_clientovi samozrejme CApath je. :)

Aha, vy asi myslite, co mate udelat ve svem programu.
No rekl bych, ze asi treba zavolat SSL_CTX_load_verify_locations()
Automaticky se to asi neprovede.

A propos:

> stat64("/usr/lib/ssl/certs/f73e89fd.0", ...) = 0

Nespoustelo se to nahodou s CApath /etc/ssl? (Nebo to mate nejak 
nalinkovane?)

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."