Pasted

# You can test whether your desired certificate is trusted by OpenSSL
# with the following command
 
openssl verify file.crt
 
# You will get an error for self-signed certificates or certificates,
# signed by an issuer not known by OpenSSL, e.g.
# error 20 at 0 depth lookup:unable to get local issuer certificate
 
# You can add your certificate to the OpenSSL trustbase as administrator (user root)
 
# First check the OpenSSL installation base:
openssl version -d
 
# You will see something like
# OPENSSLDIR: "/etc/ssl"
 
# Change to the OpenSSL certs directory
cd /etc/ssl/certs
 
# Copy your certificate file in this directory
cp /path-to/file.crt file.pem
chmod 644 file.pem
 
# Now get the subject hash of your certificate data
openssl x509 -noout -hash -in file.pem
 
# You will see a hash value, like e.g.
# a35307e4
 
# Create a hash specific symbolic link for your certificate file
ln -s file.pem a35307e4.0
 
 
# Now you can verify your certificate
openssl verify file.crt
 
# The result should look similar to the following line
# file.crt: OK