On Mon, 20 Sep 2010, Mehmet Bozkurt wrote:

> I have added a new callback type (this is for LibCurl built with OpenSSL
> only) after SSL_connect in ossl_connect_step2, ssluse.c. Here, the
> application gets a chance to inspect/modify etc. the OpenSSL SSL object used
> in the connection. We have our own cert verification functionality which I
> call from here.

And you really need your own cert verification? Is there any way you can think
of to do this that doesn't expose any TLS-library specific details?

I really want to avoid adding functionality that MUST have a particular SSL
library. The current situation is bad enough already! ;-/

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html