Hi,

I tried to use the verify_callback, but the callback seems to be called for every part of the complete certificate chain, not only for the server certificate. It also gets too few parameters.

Even if every application has to implement its own hostname checks, wouldn't it be good to have common checks like hostname with or without wildcards, IP addresses etc. in a central place? Should that be IO::Socket::SSL or Net::SSLeay? It does not make much sense to me that every application should implement all the messy certificate handling again and again.

Christopher