#certtool -e --load-ca-certificate cacert.pem < ldap-cert.pem
Issued by: C=RU,ST=State,L=City,O=company,OU=SysAdmin,CN=ldap.florist.my,<email address hidden>
certtool: Error: The last certificate is not self signed.
Notice that in verify mode it things tha issuer is the same as CN of ldap-cert.pem, while in information mode it show issuer correctly.
Of course openssl verify verifies ldap-cert.pem seamlessly.
I've noticed strange behaviour which could be related to this bug.
#certtool -i < ldap-cert.pem | grep -i issu State,L= City,O= company, OU=SysAdmin, CN=ca.domain. my,<email address hidden>
Issuer: C=RU,ST=
#certtool -e --load- ca-certificate cacert.pem < ldap-cert.pem State,L= City,O= company, OU=SysAdmin, CN=ldap. florist. my,<email address hidden>
Issued by: C=RU,ST=
certtool: Error: The last certificate is not self signed.
Notice that in verify mode it things tha issuer is the same as CN of ldap-cert.pem, while in information mode it show issuer correctly.
Of course openssl verify verifies ldap-cert.pem seamlessly.