Dear Sir,
I have read some material about openssl and
certificate verify. A certificate chain is a file in which there are several
sorted certificates include server certificate and CA certificate.
But i don't know what is the difference
between trusted root CA list and certificate chain. e.g. CA_root signs
CA_x, CA_x signs user_cert and server_cert. Can I use a certificate chain
include server_cert and CA_root to verify the client certificate
user_cert?
What can do verification using a certificate chain?
Where is the related document?
Can you help me?
Thanks very much,
Regards,
chgu
|