服务器自签名证书过期可以,Boost SSL验证过期和自签名证书

我正在使用Boost的asio通过HTTPS连接到网站.我希望这只有在证书有效,没有过期,没有自签名等情况下才能成功.不幸的是,似乎无论如何总是有效.这是我的代码:

try

{

asio::io_service ioService;

asio::ssl::context sslContext(asio::ssl::context::sslv3_client);

sslContext.load_verify_file("cacert.pem");

asio::ip::tcp::resolver resolver(ioService);

asio::ip::tcp::resolver::query query("self-signed.badssl.com", "443");

asio::ip::tcp::resolver::iterator endpointIterator = resolver.resolve(query);

boost::asio::ssl::stream<:asio::ip::tcp::socket> socket(ioService, sslContext);

ioService.run();

// Enable SSL peer verification.

socket.set_verify_mode(asio::ssl::verify_peer | asio::ssl::verify_fail_if_no_peer_cert);

asio::connect(socket.lowest_layer(), endpointIterator);

socket.handshake(asio::ssl::stream_base::client);

boost::asio::streambuf request;

std::ostream requestStream(&request);

requestStream << "GET / HTTP/1.0\r\n";

requestStream << "Host: self-signed.badssl.com\r\n";

requestStream << "Accept: */*\r\n";

requestStream << "Connection: close\r\n\r\n";

asio::write(socket, request);

等等.如果我使用set_verify_callback()并false从回调中返回,连接确实会失败,但preverified似乎总是如此,即使对于https://self-signed.badssl.com/也是如此.当然那不对？