I was going through the openssl server-client program given here---> http://simplestcodings.blogspot.com.br/2010/08/secure-server-client-using-openssl-in-c.html. I can see both the client and server get the certificates from peer. But i was wondering if i have to call a separate api to verify the certificates? In the above link, both client and server get the certificates and print them and start exchanging data. Where exactly is the certificate verification taking place here?