[Bug 284749] certctl: add support for generating cert.pem CAfiles

In reply to: bugzilla-noreply_a_freebsd.org: "[Bug 284749] certctl: add support for generating cert.pem CAfiles"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 19 Feb 2025 16:32:21 UTC

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284749

--- Comment #18 from Michael Osipov <michaelo@FreeBSD.org> ---
FTR: https://docs.openssl.org/master/man3/SSL_CTX_load_verify_locations/#notes

When looking up CA certificates for chain building, the OpenSSL library will
search for suitable certificates first in CAfile, then in CApath. Details of
the chain building process are described in "Certification Path Building" in
openssl-verification-options(1).

-- 
You are receiving this mail because:
You are the assignee for the bug.