> On Dec 11, 2017, at 6:20 PM, J Decker <d3ck0r@xxxxxxxxx> wrote: > > I'm pretty sure you need the root also, not just the intermedia ca... The purpose of X509_V_FLAG_PARTIAL_CHAIN is to make it possible to make do with just the intermediate certificate in the trust store. So, no, the root is not always required. -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users