Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- anwendungen_und_sonstiges:find_root-certificate [2022/03/29 20:10] – angelegt ronny
+++ anwendungen_und_sonstiges:find_root-certificate [2022/03/30 15:13] (aktuell) – ronny
@@ Zeile 1: / Zeile 1: @@
-====== find Root-Certificate ======
+====== OpenSSL - find Root-Certificate ======
 To find the issuer of a certificate, you should use the "Issuer DN" and match it with the "Subject DN" of the certificates in your CA store. This should reduce significantly the number of signature verification.
@@ Zeile 9: / Zeile 9: @@
 https://stackoverflow.com/questions/1567106/how-to-determine-the-root-of-a-certificate
-{{tag>[Certificate Root-CA Issuer]}}
+===== Verifying Issuer =====
+How to use OpenSSL on the command line to verify that a certificate was issued by a specific CA, given that CA's certificate
+<code>
+$ openssl verify -verbose -CAfile cacert.pem  server.crt
+server.crt: OK
+</code>
+If you get any other message, the certificate was not issued by that CA.
+https://kb.wisc.edu/iam/page.php?id=4543#:~:text=Verifying%20that%20a%20Certificate%20is%20issued%20by%20a,the%20certificate%20was%20not%20issued%20by%20that%20CA.
+{{tag>[Certificate Root-CA Issuer OpenSSL]}}