It seems that the curl library provides functionality only to verify a peer
certificate via some pre-existing CA directives, but doesn't provide
functionality to do any extended handling of the certificate the server
returns to the client during the ssl handshake. I need to have the ability
to do prompt the user to save new certificates, as well as to tell when a
known certificate may have changed (man in the middle attack perhaps). I'd
like to add the feature to the curl library to do a callback to a
user-defined function(int callback(SSL*) perhaps) to override the default
certificate behavior. I was wondering if anyone is or is planning to do
anything of this sort. Thanks.
        -Bram Whillock

-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
Received on 2002-07-02