Good day,

The following is a question re: openssl verify.

In the openssl docs, I have found that "no chain verification is done if the
option "-purpose is not set". I just checked with a few test cases (certs
from HTTPs server, chain length at least 3) and found that the output of
verify seems to be the same regardless whether the option is set (to
"sslserver") or not set.

Am I correct in surveying that openssl verify uses a default of "sslserver"
for -purpose?

(I can't find this in the docs, and Google yields inconclusive stuff)

Thanks,
Ralph

Reply via email to