Suppose I have a three-length chain: rootCA, interCA, userCert.  If I call 
X509_verify with depth 1 and only interCA in the trusted list, will that pass?

Suppose it's a four-length chain: rootCA, parentCA, childCA, userCert.  Again, 
I assume depth=1 and childCA in the trust list, it will oass.  If I have 
parentCA and depth 2?  Suppose I don't know which intermediate I have, can I 
make it pass?

Thanks.
--
Principal Security Engineer
Akamai Technology
Cambridge, MA


Reply via email to