get_command

Check if the set of entity, chain and ca certificate build a valid signature chain (calls openssl verify).

CERTIFICATE

CHAIN

TRUSTED

NOVALIDITY

If set to a true value the verification is also true if ertificates in the chain are expired.

CRL

Must contain one or more PEM encoded CRLs. Enables CRL_CHECK with option 'all'.

CRL_CHECK

Set to leaf to only validate the entity certificate.

hide_output

returns false

key_usage

returns false

get_result

Returns 1 if verify is ok, undef if not. If NOVALIDITY is set, -1 is returned for expired certificates.