cURL / Mailing Lists / curl-and-php / Single Mail

curl-and-php

Re: client certificates and certificate bundle

From: Daniel Stenberg <daniel-curl_at_haxx.se>
Date: Sat, 1 May 2004 20:52:54 +0200 (CEST)

On Sat, 1 May 2004, David Felton wrote:

> Can anyone tell me if when you are using client certificates, if these are
> checked for validity against the certificate bundle you are using?

They are not and they can't be. Only the server that issued the client cert
can verify it.

> Or if the certificate bundle is purely used to verify the certificate of the
> site you are connecting to?

That's what the bundle is there for.

-- 
     Daniel Stenberg -- http://curl.haxx.se -- http://daniel.haxx.se
      Dedicated custom curl help for hire: http://haxx.se/curl.html
Received on 2004-05-01