RE: Anyone Familiar with How Server Farms and SSL Certificates Work?

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

Partner does an annual onsite review of our process and code.  The HTTP_API does the Strict and I could not prove that with the GETURI.  

Does GETURI perform the chain validation or not?

--
Chris Bipes
Director of Information Services
CrossCheck, Inc.

707.665.2100, ext. 1102 - 707.793.5700 FAX
chris.bipes@xxxxxxxxxxxxxxx
www.cross-check.com
Notice of Confidentiality: This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information.  If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited.  If you have received this e-mail in error, please immediately notify me by e-mail (by replying to this message) or telephone (noted above) and permanently delete the original and any copy of any e-mail and any printout thereof.  Thank you for your cooperation with respect to this matter.


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Bradley Stone
Sent: Wednesday, December 14, 2016 2:02 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: Anyone Familiar with How Server Farms and SSL Certificates Work?

On Wed, Dec 14, 2016 at 3:28 PM, Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>
wrote:

> That is why the last application we coded uses the HTTP_API and not
> GETURI.  The partner made sure we were validating the chain.

I don't quite follow this.  I thought you said you used HTTP_API because it
could bypass the Handshake errors.

How did the partner validate the chain?

Brad
www.bvstools.com