Re: [Libevent-users] evhttp and TLS hostname validation

2013-01-17 Thread Patrick Pelletier
On 12/10/2012 03:05 AM, Patrick Pelletier wrote: So I had been thinking it couldn't be done with the callback. However, after re-reading the manpage for SSL_CTX_set_verify, it sounds like it does get called on success, and is given the opportunity to fail the connection. So perhaps I could cal

Re: [Libevent-users] evhttp and TLS hostname validation

2013-01-17 Thread Patrick Pelletier
On 12/10/2012 03:05 AM, Patrick Pelletier wrote: There is a SSL_CTX_set_cert_verify_callback, but the iSECPartners document says very strongly never to use it, at the bottom of page 2: https://github.com/iSECPartners/ssl-conservatory/blob/master/openssl/everything-you-wanted-to-know-about-openss