These functions add CRL checking, X509 Extension handling and proxy validation.
|
Typedef for a callback that may be registered for dealing with unhandled X.509 extension.
|
|
Retrieve or create the index for our callback data structure in the X509_STORE.
|
|
Retrieve or create the index for our callback data structure in the SSL structure.
|
|
This function wraps the OpenSSL certificate verification callback for the purpose of a replacing the standard issuer check with one that deals with proxy certificates. Should be used with SSL_CTX_set_cert_verify_callback()
|
|
This function provides a path validation callback for validation outside of a SSL session. It should be used in X509_STORE_set_verify_cb_func().
|
|
This function provides a path validation callback for the validation part of establishing a SSL session. It handles proxy certificates, X509 Extensions and CRL checking. It should be used in SSL_CTX_set_verify().
|
|
This function wraps the OpenSSL X509_check_issued() call and catches the error caused by the fact that a proxy certificate issuer may not have to have the correct KeyUsage fields set.
|
about globus |
globus toolkit |
dev.globus
Comments? webmaster@globus.org