Certificate Validation Limitations
Security Advisories
Update: Fixed in 1.0
Support for certificate validation is limited in the beta release. Certificates are validated either as self signed or as signed by a single parent root CA if specified in the matrixSslReadKeys() API.
The certificate contents are parsed but not currently accessible to the client application, so validation on expiration date or certificate name are not supported.
The next release of MatrixSSL will expose the parsed certificate through an API which will allow application level validation.
March 08, 2004