Re: Verification of a certificate chain

2014-05-30 Thread Sven Reissmann
from this key in the near future. On 05/30/2014 12:03 AM, Dave Thompson wrote: >> From: owner-openssl-us...@openssl.org On Behalf Of Sven Reissmann >> Sent: Thursday, May 29, 2014 12:24 > >> What I did was: >> >> - I generated a newRootCA (new keypair, selfsigned certif

RE: Verification of a certificate chain

2014-05-29 Thread Sven Reissmann
Hi, Dave, thank you very much for your suggestions. This sounds like the solution I'm looking for. I've set up a completely new PKI to test this, but I'm still having one problem. What I did was: - I generated a newRootCA (new keypair, selfsigned certificate). - I generated another selfsigned c

Re: Verification of a certificate chain

2014-05-27 Thread Sven Reissmann
D 4D38 F0B6 7557 2E68 D557 49AA 1D99 Note: I'll be transitioning away from this key in the near future. On 05/27/2014 05:16 PM, Dr. Stephen Henson wrote: > On Tue, May 27, 2014, Viktor Dukhovni wrote: > >> On Tue, May 27, 2014 at 03:44:46PM +0200, Sven Reissmann wrote: >> &

Verification of a certificate chain

2014-05-27 Thread Sven Reissmann
Hi, I'm having a comprehension question on certificate verification. Having a trustchain like this: rootCA -> subCA -> subCA2 I can verify the subCA2 certificate using the command: openssl verify -CAfile rootCA.pem -untrusted subCA.pem subCA2.pem But, should't it also be possible to only veri