curl-and-php
Re: client certificates and certificate bundle
From: Daniel Stenberg <daniel-curl_at_haxx.se>
Date: Sat, 1 May 2004 20:52:54 +0200 (CEST)
Date: Sat, 1 May 2004 20:52:54 +0200 (CEST)
On Sat, 1 May 2004, David Felton wrote:
> Can anyone tell me if when you are using client certificates, if these are
> checked for validity against the certificate bundle you are using?
They are not and they can't be. Only the server that issued the client cert
can verify it.
> Or if the certificate bundle is purely used to verify the certificate of the
> site you are connecting to?
That's what the bundle is there for.
-- Daniel Stenberg -- http://curl.haxx.se -- http://daniel.haxx.se Dedicated custom curl help for hire: http://haxx.se/curl.htmlReceived on 2004-05-01