Curl-program has option:

  --cacert [cert-file]

If servert cert doesn't match with it then program just puts text (when
having -v option)

* Verify result: 21

Actually it would be nice to make program just exit with some defined
exit(2)-code in that case.

someting like this should be inserted to "lib/ssluse.c". I guess.

ssluse.c: 356

 if(data->ssl.verifypeer) {
    data->ssl.certverifyresult=SSL_get_verify_result(conn->ssl.handle);
    infof(data, "Verify result: %d\n", data->ssl.certverifyresult);
+ if(data->ssl.certverifyresult != 0) {
+ failf(data, "SSL: server cert verify fails!");
+ return XXXX;
    }
  }

Any opinions.

   Jukka Pihl
   jukka pihl at entirem.com

_______________________________________________
Curl-library mailing list
Curl-library_at_lists.sourceforge.net
http://lists.sourceforge.net/lists/listinfo/curl-library
Received on 2001-05-11