On Wed, Jan 16, 2008, rfx wrote:

> Yes, i read it
> For first point, i think that there is not ths same subject and issuer,
> like final autosign certificat of AC ?
> For second point, after translating, it's more difficult for me to
> understand "keyusage" not to be include ;-)

The point is that -issuer_checks is a debugging option, you shouldn't include
it during normal operation. The fact that you get OK at the end shows the
verification was successful.

Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org