> #$ openssl s_server -key privkey.pem -cert server.pem -accept 8446 -verify ca.pem Change the '-verify' to '-CAfile' and it might work. -Kyle H On Sun, Mar 4, 2018 at 9:58 PM, salil GK <gksalil at gmail.com> wrote: > > #$ openssl s_client -cert tomcat.pem -key tomcat_priv.pem -CAfile > ca.pem -connect lrc1.cisco.com:8446 >