https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284749
--- Comment #18 from Michael Osipov <micha...@freebsd.org> --- FTR: https://docs.openssl.org/master/man3/SSL_CTX_load_verify_locations/#notes When looking up CA certificates for chain building, the OpenSSL library will search for suitable certificates first in CAfile, then in CApath. Details of the chain building process are described in "Certification Path Building" in openssl-verification-options(1). -- You are receiving this mail because: You are the assignee for the bug.