[openssl-users] Problem verifying a certificate chain

[Viktor Dukhovni]

> On Nov 29, 2017, at 10:57 AM, Pascal Withopf <pwithopf at adiscon.com> wrote:
> 
> $ openssl x509 -in serverCA.pem -noout -purpose
> 
> ...
> 
> If the purpose is incorrect how can I set it?
> 
> 2017-11-29 16:48 GMT+01:00 Viktor Dukhovni <openssl-users at dukhovni.org>:
> On Wed, Nov 29, 2017 at 04:33:39PM +0100, Pascal Withopf wrote:
> 
>>>  err 24:invalid CA certificate
>> 
>> The intermediate CA extensions are likely incorrect.  Post
>> the certificate in question.

Post the certificate in question.

-- 
	Viktor.