#22 Possibility to check specifics of CMP server certificate

[Martin Peylo]

If "-trusted" is given, there should be an additional option to check details of the used server certificate.

E.g. it would be of advantage to insist on receiving a certificate with specific Policy OID (indicating an authorized CMP server Entity).

[David von Oheimb]

This can already be achieved (yet there is no CLI option in the app for it) via ctx->cert_verify_cb.

[David von Oheimb]

The general certificate verification CLI options are available, but the following ones seem to have little to no effect:
-policy_check
-policy mytest
-purpose mypurpose
-verify_name myname
-verify_depth 99
-explicit_policy
-inhibit_any
-inhibit_map
-policy_print