Re: [mosquitto-dev] additional TLS verification with libmosquitto

[Peter Korsgaard <peter@xxxxxxxxxxxxx>]

>>>>> "Roger" == Roger Light <roger@xxxxxxxxxx> writes:

 > Hi Peter,
 > It's not quite what you're asking, but you can use
 > `mosquitto_opts_set(mosq, MOSQ_OPT_SSL_CTX, ssl_ctx)` to pass your own
 > SSL_CTX instance for use when creating the SSL connection. You can
 > configure this exactly as you want of course.
 > MOSQ_OPT_SSL_CTX_WITH_DEFAULTS is also worth looking at here.

Thanks, and I also had a look at that - But I don't see any easy way of
using that - net_mosq.c unconditionally calls SSL_CTX_set_verify(), so it
will override a verify callback I have set up earlier.

Unless I'm missing something?

 > I don't see a problem with adding in a function for getting hold of mosq->ssl.

Ok, great - I will send a patch then.

-- 
Bye, Peter Korsgaard