Client certificate authentication

Kyle Hamilton aerowolf at gmail.com
Thu Mar 11 19:19:17 UTC 2021


If he's trying to muck with the library, he's probably struggling with a
precompiled binary he doesn't have the source code to.

-Kyle H

On Thu, Mar 11, 2021, 11:48 Viktor Dukhovni <openssl-users at dukhovni.org>
wrote:

> > On Mar 11, 2021, at 2:16 PM, Robert Ionescu <hightronicdesign at gmail.com>
> wrote:
> >
> > I am searching for the functions in openssl used to verify the clients
> > certificate when using mutual authentication.
>
> The same code verifies peer certificate chains, whether client or server.
>
> > My intention is to find a way to log a wrong user certificate directly
> inside
> > the openssl source.
>
> What does "wrong" mean?  OpenSSL is a library, it has no business making
> decisions like writing log entries, that's an application prerogative, and
> any logging of diagnostic or audit trail events should in application code,
> not in OpenSSL library code.
>
> --
>         Viktor.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20210311/bbeda189/attachment.html>


More information about the openssl-users mailing list