[openssl-users] Certificate Verify and non-root Trust Anchors

[Viktor Dukhovni]

> On Dec 11, 2017, at 6:20 PM, J Decker <d3ck0r at gmail.com> wrote:
> 
> I'm pretty sure you need the root also, not just the intermedia ca...

The purpose of X509_V_FLAG_PARTIAL_CHAIN is to make it possible
to make do with just the intermediate certificate in the trust
store.  So, no, the root is not always required.

-- 
	Viktor.