Hi, It there a way to verify certificate with out root ca? I have 4 certificate: rootca.pem is the root ca (self signed). subca.pem was signed by rootca.pem. cert1.pem & cert2.pem was signed by subca.pem. I was supposed to configure the client and server using subca.pem as ca, and cert1.pem & cert2.pem as certificate. It seem that openssl still try to find rootca.pem to verfiy subca.pem when handshake. But I don't what root.pem can bo accessed for keeping it safe. So It there a way to verify certificate with out root ca, only using sub ca and certificate signed by sub ca? Thanks.
Br Ben