Hi All,

I have a small doubt regarding SSL. I am making a library for certificate management and key store which will be used by applications. There is one API which will verify the certificate passed by the application.To verify the certificate i have to make the certificate chain till ROOT CA. Is it possible to make the certificate chain from a certificate ? I don't have any link with SSL session, just i will get one certificate in X509 * format.I have a default database of ROOT CA but i don't have the intermediate CA.How to prepare the cert chain from the application supplied certificate ?

Thanks in advance,

Bye,
Aravind.

You either need to install all possible intermediate CA certs in your application's database, or the clients have to present the bundled certificate, which you have pretty much no control over.