Re: Certificate verification with cross signed CAs

2024-07-01 Thread Viktor Dukhovni
On Mon, Jul 01, 2024 at 03:54:46PM +0100, James Chapman wrote: > I’ve been using openssl verify to check some certificate chains: > > server -> ca -> roota > server -> alt_ca-> rootb > > Certificates ca and alt_ca have the same subject and public key and different > issuers. > > openssl veri

Certificate verification with cross signed CAs

2024-07-01 Thread James Chapman
I’ve been using openssl verify to check some certificate chains: server -> ca -> roota server -> alt_ca-> rootb Certificates ca and alt_ca have the same subject and public key and different issuers. openssl verify -trusted roota.pem -untrusted ca.pem server.pem openssl verify -trusted rootb.pe

Re: Missing header file ts_local.h in install location.

2024-07-01 Thread Tomas Mraz
Yes, they should search for TS_VERIFY_CTX_set_certs or TS_VERIFY_CTX_set_flags (that would work for 1.1.1 as well). Tomas Mraz, OpenSS On Fri, 2024-06-28 at 20:04 +, BENTLEY Thom wrote: > > > > Does this Bing CoPilot response suggest that DCMTK’s CMake > configuration should be searching f