I've made a self-signed DSA CA (RootCA) following
instructions gleaned from the archives.
The RootCA signs a request for User1. User1
installs the certificate.
The RootCA signs a request for User2. User 2
installs the certificate.
User1 encrypts some data, combines it with his
cert, signs it (using DSA), and sends it to user2 by email.
I've figured out how to verify the signature, but
how do I verify the cert? Do I care?
I've tried "verify -verbose cert.pem", which
returns
cert.pem: /C=US/ST....
error 20 at 0 depth lookup:unable to get local issuer certificate |