On Tue, Oct 04, 2022 at 12:27:25PM -0400, Bill Cole wrote: > > are self-signed certificates prohibited from this kind of > > verification? > > Yes, definitionally. "Verification" means auditing the trust chain to > reach a trusted root certificate. Unless you add the self-signed cert to > your set of trusted roots, you cannot verify it.
But not from certificate-based access checks, which is what the OP is really asking. -- Viktor.