Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a system level because this is a development situation.

Is there any ability in openssl to have CA's registered at a user-level? I'm hoping for something like the ~/.ssh directory, except for CA's.

share|improve this question

migrated from Dec 8 '12 at 2:42

This question came from our site for professional and enthusiast programmers.

The openssl subcommands accept the -CAfile and -CApath options:

From the manpage:

-CAfile file
    Verify the signature on a CRL by looking up the issuing certificate
    in file.

-CApath directory
    Verify the signature on a CRL by looking up the issuing certificate
    in dir.  This directory must be a standard certificate directory,
    i.e. a hash of each subject name (using x509 -hash) should be
    linked to each certificate.
share|improve this answer
I guess my question was ambiguous, but I'm trying to solve this for the various tools which use the openssl system, i.e. libssl. I don't believe this relates to the openssl command. – bukzor Dec 10 '12 at 23:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.