openssl学习笔记

 OPENSSL X509证书验证 

http://blog.chinaunix.net/uid-24709751-id-3527545.html

x509_vfy.c

http://www.verysource.com/code/713120_1/x509_vfy.c.html

int X509_cmp_time(const ASN1_TIME *s, time_t *t);//校验证书有效期


#define X509_get_notAfter(x) ((x)->cert_info->validity->notAfter)


static int check_cert_time(X509_STORE_CTX *ctx, X509 *x)
{
......
    i=X509_cmp_time(X509_get_notBefore(x), ptime);
......
    i=X509_cmp_time(X509_get_notAfter(x), ptime);
}

X509* pX509 =  SSL_get_certificate(ssl);
        if(NULL == pX509)
        {
            DEBUG_ERROR("pX509 is NULL" );
            return -1;
        }


        DEBUG_INFO("Validity.Not After :" << pX509->cert_info->validity->notAfter->data);