On Wed, Jan 16, 2008, rfx wrote: > Yes, i read it > > For first point, i think that there is not ths same subject and issuer, > like final autosign certificat of AC ? > > For second point, after translating, it's more difficult for me to > understand "keyusage" not to be include ;-) >
The point is that -issuer_checks is a debugging option, you shouldn't include it during normal operation. The fact that you get OK at the end shows the verification was successful. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
