Terminate chain at intermediate certificate.

2010-11-12 Thread Dimitrios Siganos
Hi, Is there a way to instruct openssl to treat an intermediate CA as a trusted CA, which need not have its issuer checked i.e. it will be the last certificate of the certificate chain. It seems that openssl insists on always terminating a chain at a self-signed certificate. However, in this

Re: Terminate chain at intermediate certificate.

2010-11-11 Thread Victor Duchovni
On Wed, Nov 10, 2010 at 11:02:05PM +, Dimitrios Siganos wrote: You can turn the can't find local issuer error for B, into an OK in the verification callback by specifically whitelisting the the fingerprint of B, or finding B in a suitable store. So the solution is: 1) Maintain a

Terminate chain at intermediate certificate.

2010-11-10 Thread Dimitrios Siganos
Hi, Is there a way to instruct openssl to treat an intermediate CA as a trusted CA, which need not have its issuer checked i.e. it will be the last certificate of the certificate chain. It seems that openssl insists on always terminating a chain at a self-signed certificate. However, in this

Re: Terminate chain at intermediate certificate.

2010-11-10 Thread Victor Duchovni
On Wed, Nov 10, 2010 at 10:10:48PM +, Dimitrios Siganos wrote: Hi, Is there a way to instruct openssl to treat an intermediate CA as a trusted CA, which need not have its issuer checked i.e. it will be the last certificate of the certificate chain. It seems that openssl insists on

Re: Terminate chain at intermediate certificate.

2010-11-10 Thread Dimitrios Siganos
On 10/11/10 22:30, Victor Duchovni wrote: On Wed, Nov 10, 2010 at 10:10:48PM +, Dimitrios Siganos wrote: You can turn the can't find local issuer error for B, into an OK in the verification callback by specifically whitelisting the the fingerprint of B, or finding B in a suitable store.

Re: Terminate chain at intermediate certificate.

2010-11-10 Thread Dr. Stephen Henson
On Wed, Nov 10, 2010, Dimitrios Siganos wrote: Hi, Is there a way to instruct openssl to treat an intermediate CA as a trusted CA, which need not have its issuer checked i.e. it will be the last certificate of the certificate chain. It seems that openssl insists on always terminating a