openssl-verification-options(1ssl) on Linux
The text 52b6a8eb7ebb, as Debian 12 (Bookworm) shipped it.
generic X.509 certificate verification options
Flags it lists
-
-CAfile -
-CApath -
-CAstore -
-allow_proxy_certs -
-attime -
-auth_level -
-check_ss_sig -
-crl_check -
-crl_check_all -
-explicit_policy -
-extended_crl -
-ignore_critical -
-inhibit_any -
-inhibit_map -
-issuer_checks -
-no-CAfile -
-no-CApath -
-no-CAstore -
-no_alt_chains -
-no_check_time -
-partial_chain -
-policy -
-policy_check -
-policy_print -
-purpose -
-suiteB_128 -
-suiteB_128_only -
-suiteB_192 -
-trusted -
-trusted_first -
-untrusted -
-use_deltas -
-verbose -
-verify_depth -
-verify_email -
-verify_hostname -
-verify_ip -
-verify_name -
-x509_strict -
-xcert -
-xcertform -
-xchain -
-xchain_build -
-xkey -
-xkeyform