Hi, hope all is well.


I'd like to make a variety of connections within the same application - one 
acting as server the other as client. I would like to be able to use one list 
of trusted CA certificates for one connection, but a different list for the 
other. Having read the documentation, I'm not sure how (or if) I can do this.



My first plan was to create separate databases. However, the initialisation 
command is not idempotent.



I then looked at the API. The closest command I could find to what I need was 
SSL_AuthCertificate(), but it only accepts the certificate database handle, it 
does not allow you to select a subset of CA certificates you want to use in 
authentication.



I'm beginning to think my only options (without lower level hacking) are to 
either split the application into separate executables, or live with the fact 
that the same CA list will be used in authenticating ALL connections.



I would be most grateful if someone could please confirm whether I'm right in 
thinking that or (if not) some other means.



Thank you and best regards,

Sam Laidler
Software Engineer

direct +44 (0)1252 644 207
email 
samuel.laid...@the-logic-group.com<mailto:samuel.laid...@the-logic-group.com>

[cid:signature260d.jpg]    <http://www.the-logic-group.com/>


The Logic Group Enterprises Limited, Logic House, Waterfront Business Park, 
Fleet Road, Fleet,
Hampshire, GU51 3SB, United Kingdom. Registered in England. Registered No. 
2609323


The information in this email and any attachments are confidential and may be 
legally privileged and protected by law. It is for the intended recipient only. 
If you are not the intended recipient you may not use, disclose, copy, 
distribute, print or rely on the content of this email or its attachments. If 
this email has been received by you in error please advise the sender and 
delete the email from your system.


-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to