ID
Ну или ты сделал что-то не то :)
curl не ругается?
Size: a a a
ID
ID
DI
ID
ID
ID
DI
ID
DI
DI
DI
cat > ./openssl.conf << EOL
[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no
[req_distinguished_name]
C = VA
ST = Vatican
L = Vatican
O = The Holy See
CN = *
[v3_req]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer
basicConstraints = CA:TRUE
subjectAltName = IP:xxx
EOL
DI
$ openssl s_client -showcerts -verify 32 -CApath . -connect xxx:5000
verify depth is 32
CONNECTED(00000003)
depth=0 C = VA, ST = Vatican, L = Vatican, O = The Holy See, CN = *
verify error:num=18:self signed certificate
verify return:1
depth=0 C = VA, ST = Vatican, L = Vatican, O = The Holy See, CN = *
verify return:1
---
Certificate chain
0 s:/C=VA/ST=Vatican/L=Vatican/O=The Holy See/CN=*
i:/C=VA/ST=Vatican/L=Vatican/O=The Holy See/CN=*
-----BEGIN CERTIFICATE-----
...
DI
OM
NK
ID
ID
DI
OM