• Registered: 2023-09-08
  • Posts: 5

Topic: Equivalent config for X509_V_FLAG_PARTIAL_CHAIN

In python, there is a configuration settings when creating a ssl context:
```
ssl_context.verify_flags |= 0x80000  # Refers to setting X509_V_FLAG_PARTIAL_CHAIN flag.
```
Is there any configuration settings in wolfssl similar with this X509_V_FLAG_PARTIAL_CHAIN flag.

Note: The X509_V_FLAG_PARTIAL_CHAIN flag causes intermediate certificates in the trust store to be treated as trust-anchors, in the same way as the self-signed root CA certificates. This makes it possible to trust certificates issued by an intermediate CA without having to trust its ancestor root CA.

Share

  • Registered: 2021-08-12
  • Posts: 74

Re: Equivalent config for X509_V_FLAG_PARTIAL_CHAIN

Hi Bahadirmaktav,

How are you today? My name is Anthony Hu and I am a member of the wolfSSL team. I have checked, and we do not support this particular flag in our OpenSSL compatibility layer. However, I will query my colleagues to see if there is a simple way for you to do this. Please stay tuned.

Warm Regards, Anthony

Share