谁能告诉我 SSL_CTX_set_cert_verify_callback 和 SSL_CTX_set_verify 有什么区别？ 来自 OpenSSL 文档:
SSL_CTX_set_cert_verify_callback() sets the verification callback function for ctx. SSL objects that are created from ctx inherit the setting valid at the time when SSL_new(3) is called.
和:
SSL_CTX_set_verify() sets the verification flags for ctx to be mode and specifies the verify_callback function to be used. If no callback function shall be specified, the NULL pointer can be used for verify_callback.
所以我试图了解为每个回调发送哪个回调(从客户端)。
感谢专家。
最佳答案
SSL_CTX_set_cert_verify_callback() 意味着您要指定一个函数来执行整个验证过程(遍历证书链依次验证每个证书)。 [根据下面的警告，您可能不想这样做]
另一方面，SSL_CTX_set_verify() 指定默认验证器检查每个证书时调用的函数，preverify_ok 设置为 0 或 1 以指示相关证书的验证是否有效。
来自 SSL_CTX_set_cert_verify_callback() 的文档
WARNINGS
Do not mix the verification callback described in this function with the verify_callback function called during the verification process. The latter is set using the SSL_CTX_set_verify(3) family of functions.
Providing a complete verification procedure including certificate purpose settings etc is a complex task. The built-in procedure is quite powerful and in most cases it should be sufficient to modify its behaviour using the verify_callback function.
关于callback - SSL_CTX_set_cert_verify_callback 与 SSL_CTX_set_verify，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/2729254/