When are certificate chains validated?

[Mikael Svensson]

Hello

My thesis revolves around automatic certificate retrieval: If the caller 
only sends a single certificate in his MIKEY invitation (instead of the 
entire certificate chain to the root CA) then my class is supposed to 
find/download the missing certificates.

My question is this:

When (in which function of which class) are received certificate chains 
validated? It appears to be in PeerCertificates::controlPeerCertificate, 
where "peerCertChainPtr->control" is executed, but I', not sure...


Regards
Mikael Svensson