[xmlsec] Trusted certs directory

[dnorrell at gmx.net]

Thanks for the reply. However, I'm confused in that case because the xmldsigverify.c examples uses it as so:

#define XMLDSIGVERIFY_DEFAULT_TRUSTED_CERTS_FOLDER      "/var/www/cgi-bin/keys-certs.def"

/* Init crypto library */
if(xmlSecCryptoAppInit(XMLDSIGVERIFY_DEFAULT_TRUSTED_CERTS_FOLDER) < 0) {
        fprintf(stdout, "Error: crypto initialization failed.\n");
        return(-1);
}

However, is is possible to configure a trusted certs directory, or do I need to read the directory contents myself and load each one individually with xmlSecCryptoAppKeysMngrCertLoad?

Thanks for the help.
David


> http://www.aleksey.com/xmlsec/api/xmlsec-app.html#XMLSECCRYPTOAPPINIT
> 
> Please, read help carefully! The "con fig" parameter for this function
> is *not* a directory with trusted certificates. It is crypt-library
> specific configuration folder. At the moment, only NSS is using it for
> locating NSS keys and certificates database files.
> 
> Aleksey

-- 


Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen!
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer