verifying ssl certificates

[Paul Rubin]

"Christopher N. Deckard" <cnd at ecn.purdue.edu> writes:
> I was wondering if anyone has some sample code, or could point me at
> some documentation, to where I can see how to verify SSL
> certificates after making an SSL connection via sockets.  Is it as
> simple as comparing the response of the server to that of something
> in a file?

Usually you configure the SSL stack to do this for you.  If the
certificate doesn't verify, the SSL connection won't even open,
so your application will never get to see an invalid cert.