On Sun, Oct 25, 2009, Daniel Marschall wrote: > Hello. > > I have a problem with verification of certificates. > > My command line is: > > openssl verify -verbose -issuer_checks -crl_check_all -CAfile > tmp_cachain.pem daniel-marschall.crt >
Do you get an error without -issuer_checks? As the manual indicates that is a debugging option that logs the verification process and for perfectly valid chains you will get notifications of mismatches as candidate certificates are discarded. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
