On Thu, 24 Sep 2015, puneet bist wrote:

> I was earlier using SSL 0.9.8 with curl 7.39.0. Server used TLSv1.0 for
> communication. I used " curl_easy_setopt(curl_handle,
> CURLOPT_SSL_CTX_FUNCTION, ctx_callback);" for self-signed certificates
> fingerprint matching.
>
> In callback function X509_STORE_CTX_get_current_cert always gave the
> certificate which i used to extract the fingerprint. It was working fine.
>
> Now i builded curl 7.39.0 with openssl 1.0.2d and Server used TLSv1.1 for
> communication. But X509_STORE_CTX_get_current_cert always returning NULL. So
> i am not able to check the fingerprint .

The callback simply gets the CTX pointer passed to it that libcurl has, so
this is unfortunately not something libcurl affects. In a *SSL_CTX_FUNCTION
callback like this you interface directly with OpenSSL and I believe you need
to dig down into OpenSSL to figure out why it now returns a different result
now compared to before.

Maybe you can consider switching to CURLOPT_PINNEDPUBLICKEY anyway to avoid a
custom callback?

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html