[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Nmh-workers] TLS certificate validation
|
From: |
Ken Hornstein |
|
Subject: |
Re: [Nmh-workers] TLS certificate validation |
|
Date: |
Sat, 24 Sep 2016 22:27:41 -0400 |
>Back to OpenSSL, this armchair-Google expert thinks it looks like
>OpenSSL may provide certificate-chain verification?
>https://www.openssl.org/docs/manmaster/ssl/SSL_CTX_set_verify.html
Oh, yeah, THAT part is easy. But we also have to do certificate name
and SAN validation, at least, AND .... should we do OCSP to check CRLs?
--Ken
Re: [Nmh-workers] TLS certificate validation, David Levine, 2016/09/24
Re: [Nmh-workers] TLS certificate validation, Ralph Corderoy, 2016/09/24
Re: [Nmh-workers] TLS certificate validation, Jeffrey Honig, 2016/09/24