Re: Certificate information

[Scott Klement <sk@xxxxxxxxxxxxxxxx>]

Hi Ian,

Looking into the documentation for the "gsk_get_certificate_info" API 
(link below) it only has the options to return the "local certificate" 
and "partner certificate".  I interpret this as being the last 
certificate in each chain.  (i.e. the last in the chain of certs for the 
client and the last in the chain of certs for the server)

http://tinyurl.com/yoyowr

I don't see an option to get certificate info for the rest of the chain. 
   (Using this API)

On the other hand, the GSK_CERT_VALIDATION_CALLBACK option (which 
requires V5R3, link below) seems to provide an option to get the entire 
chain...   maybe I should explore that option more thoroughly?

http://tinyurl.com/2dsuaq



ian wrote:
> Scott,
> 
> When you specify information regarding 'the certificate' I presume that
> you are referring to the final certificate in the chain.
> 
> Is it possible to get information on other certificates in the chain ? I
> our case there are two CA certificates (one is an intermediate CA) as
> well as the end certificate.
> 
> Regards
>  
> Ian Patterson
>  
> 
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------