> On Nov 29, 2017, at 10:57 AM, Pascal Withopf <pwithopf@xxxxxxxxxxx> wrote: > > $ openssl x509 -in serverCA.pem -noout -purpose > > ... > > If the purpose is incorrect how can I set it? > > 2017-11-29 16:48 GMT+01:00 Viktor Dukhovni <openssl-users@xxxxxxxxxxxx>: > On Wed, Nov 29, 2017 at 04:33:39PM +0100, Pascal Withopf wrote: > >>> err 24:invalid CA certificate >> >> The intermediate CA extensions are likely incorrect. Post >> the certificate in question. Post the certificate in question. -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users