Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Feb 2025 16:32:21 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 284749] certctl: add support for generating cert.pem CAfiles
Message-ID:  <bug-284749-227-tEaOPNzyfO@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-284749-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-284749-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D284749

--- Comment #18 from Michael Osipov <michaelo@FreeBSD.org> ---
FTR: https://docs.openssl.org/master/man3/SSL_CTX_load_verify_locations/#no=
tes

When looking up CA certificates for chain building, the OpenSSL library will
search for suitable certificates first in CAfile, then in CApath. Details of
the chain building process are described in "Certification Path Building" in
openssl-verification-options(1).

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-284749-227-tEaOPNzyfO>