回答:
opensslサブコマンドは受け入れ-CAfileおよび-CApathオプション:
マンページから:
-CAfile file
Verify the signature on a CRL by looking up the issuing certificate
in file.
-CApath directory
Verify the signature on a CRL by looking up the issuing certificate
in dir. This directory must be a standard certificate directory,
i.e. a hash of each subject name (using x509 -hash) should be
linked to each certificate.
libssl。これがopensslコマンドに関係するとは思わない。