ca_location

Specifies the location of the trust store that contains hashed, trusted CA certificates.

ca_location | ca_loc=TrustStoreDir

Arguments

TrustStoreDir—relative or full path to directory containing the trust store

Use

Set this option in the assignment file of the application that is verifying the other.

Description

On some Linux machines, there are standard trust stores in locations like /etc/ssl/certs, /var/lib/ca-certificates, /etc/pki/tls/certs, or some other location. You can use the ca_location option to specify this location.

Alternatively, you can use the ca_certificate option to specify a bundle with CA certificates.

Server Verification from a Unix TLS Client

; client.asn on Unix
[NET_SETTINGS]
CheckServer verify_server=yes, ca_location=/etc/ssl/certs

Related Topics