Using openssl to verfiy certificate chains is pretty straight forward – see a full script below. One thing that confused me for a bit was how to specify trust anchors without importing them to the pki config of the os (I also did not want to accept all of the trust anchors). So.. here what to do for specif trust anchors

So here’s a simple script that will pull.. Read More