Re: [openssl-users] How to display root certificate in command line

2014-12-22 Thread Salz, Rich
> But in certificate chain, I only get 2 certificates information (I think this > two > are return by website.) That's right. The server returns up to, but not including, the root. The client is supposed to have the root stored somewhere as an out-of-band trust anchor. This is the way TLS/

Re: [openssl-users] How to display root certificate in command line

2014-12-22 Thread Jakob Bohm
On 22/12/2014 11:52, Jerry OELoo wrote: Hi All: I have used openssl command line to get some website's certificate chain. Now, I want to show root certificate information. but I do not find any command argument to do it. openssl s_client -showcerts -CApath /etc/ssl/certs -connect studentexclusiv

[openssl-users] How to display root certificate in command line

2014-12-22 Thread Jerry OELoo
Hi All: I have used openssl command line to get some website's certificate chain. Now, I want to show root certificate information. but I do not find any command argument to do it. openssl s_client -showcerts -CApath /etc/ssl/certs -connect studentexclusives.hsbc.co.uk:443 I use -CApath to set ro