Thanks Rich.
openssl version -a
…
OPENSSLDIR: "/usr/local/openssl-1.0.2a/ssl"
—
That tells me the dir openssl is looking in.
ls /usr/local/openssl-1.0.2a/ssl
total 36
drwxr-xr-x 6 root root 4096 2019-10-23 16:34 .
drwxr-xr-x 7 root root 4096 2019-10-22 12:27 ..
drwxr-xr-x 2 root root 4
* I can’t find documentation on how to tell TLS where to look.
Not sure about 1.0.2, but “openssl version -a” should show you the CERT
directory.
BTW, that’s an old release, you should upgrade if possible.
I built openssl 1.0.2 from the tar.gz file.
I am trying to verify a connection, but TLS does not find the ca-bundle.crt
unless it is on the command line:
/usr/local/openssl/bin/openssl s_client -showcerts -connect mta3.edu:25
-starttls smtp
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA
