[openssl-users] How to prove a Certificate is Signed or not

morthalan morthalaanilreddy at gmail.com
Thu May 3 13:02:16 UTC 2018


I got two Ideas. I can verify the certificate by comparing the issuer name

char *s = X509_NAME_oneline(X509_get_subject_name(cert), NULL, 0);
char *i = X509_NAME_oneline(X509_get_issuer_name(cert), NULL, 0);
int rc = strcmp(s, i);

verifying with public key 

EVP_PKEY *caPubkey = X509_get_pubkey(signCert);
X509_REQ_verify(certreq, caPubkey);

thanks for the suggestions.





--
Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html


More information about the openssl-users mailing list