David Coulson <da...@davidcoulson.net> writes: > On 3/29/11 12:58 PM, Bruce Stephens wrote: >> Add the -showcerts option to the s_client commands and you'll see the >> first server returns a chain of certificates where the second offers >> only the end server certificate. > Okay, I see that - Makes sense. When I hit the hostname w/ Firefox I'm > able to see a complete certificate chain. Where does it get that > information from?
It'll be built in. Web browsers have an improbably large number of certificates (many of them trusted) automatically available in some way (Firefox has its own database, IE uses some part of the Windows certificate store). [...] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
