Validating key/certificate pairs with M2Crypto when a certificate chain is needed
- by Charles Duffy
M2Crypto.X509.X509 objects have a verify(pkey) method, which provide a means of testing that a given certificate does in fact sign a specified key.
This is a good and useful thing -- except that sometimes the certificate I want to verify in this way is invalid without the use of an intermediate certificate, which this API does not appear to allow a way to specify.
Is there an alternate means of validating a certificate / private key pair which will work even when the certificate is unable to stand alone?