Create a certificate authority list

Create a CA list file containing the trusted certificate authorities used to verify certificates.

A CA list is a file containing one or more trusted Certificate Authority (CA) certificates in PEM format. Clients use it to verify that a server or client certificate was signed by a trusted CA. If you are using the local root CA created in Create a root certificate authority, your CA list contains a single entry.

Concatenate the certificate authority certificates into a single CA list file, in certificate chain order:

$ openssl x509 -in MyCA1.crt -text >> CAList.pem
$ openssl x509 -in MyCA2.crt -text >> CAList.pem
$ openssl x509 -in MyCA3.crt -text >> CAList.pem

For the local test setup from Create a root certificate authority, the CA list contains a single entry:

$ openssl x509 -in MyRootCA.crt -text >> CAList.pem