I am new to openssl and I am having some trouble verifying (from a client machine) an ftp server using ssl with a self-signed certificate.

I generated the .cer file by going to my server in IIS and exporting the certificate without the private key. I believe that this is all that I should need on the client side, right?

I use the following code to verify the certificate

openssl verify ftp.cer

and the error that I get back is

error 20 at 0 depth lookup:unable to get local issuer certificate

I tried this as well:

openssl verify -CAfile ftp.cer ftp.cer

but received the same error.

From what I understand about SSL, this is happening because I have no chain of trust that connects to this server. By default, openssl did not install any trusted CAs and this is fine. I would just like to tell it to trust this server. I tried various tutorials telling me how to add a certificate authority, including this one here, however the instructions are for linux and include adding a symlink and I am trying to do this in windows.

If anyone could provide any guidance on how to do this, or enlighten me if I am not understanding something correctly, I would greatly appreciate it.

Thanks!