Re: Terminate chain at intermediate certificate.

2010-11-11 Thread Victor Duchovni
On Wed, Nov 10, 2010 at 11:02:05PM +, Dimitrios Siganos wrote: > > You can turn the can't find local issuer error for B, into an > > OK in the verification callback by specifically whitelisting > > the the fingerprint of B, or finding B in a suitable store. > > So the solution is: > 1) Mainta

Re: Terminate chain at intermediate certificate.

2010-11-10 Thread Dr. Stephen Henson
On Wed, Nov 10, 2010, Dimitrios Siganos wrote: > Hi, > > Is there a way to instruct openssl to treat an intermediate CA as a > trusted CA, which need not have its issuer checked i.e. it will be the > last certificate of the certificate chain. > > It seems that openssl insists on always terminati

Re: Terminate chain at intermediate certificate.

2010-11-10 Thread Dimitrios Siganos
On 10/11/10 22:30, Victor Duchovni wrote: > On Wed, Nov 10, 2010 at 10:10:48PM +, Dimitrios Siganos wrote: > You can turn the can't find local issuer error for B, into an > OK in the verification callback by specifically whitelisting > the the fingerprint of B, or finding B in a suitable store.

Re: Terminate chain at intermediate certificate.

2010-11-10 Thread Victor Duchovni
On Wed, Nov 10, 2010 at 10:10:48PM +, Dimitrios Siganos wrote: > Hi, > > Is there a way to instruct openssl to treat an intermediate CA as a > trusted CA, which need not have its issuer checked i.e. it will be the > last certificate of the certificate chain. > > It seems that openssl insists