Hi,

It there a way to verify certificate with out root ca? I have 4
certificate: rootca.pem is the root ca (self signed). subca.pem was
signed by rootca.pem. cert1.pem & cert2.pem was signed by subca.pem. I
was supposed to configure the client and server using subca.pem as ca,
and cert1.pem & cert2.pem as certificate. It seem that openssl still try
to find rootca.pem to verfiy subca.pem when handshake. But I don't what
root.pem can bo accessed for keeping it safe. So It there a way to
verify certificate with out root ca, only using sub ca and certificate
signed by sub ca? Thanks.


Br

Ben

Reply via email to