The tlsVerifyDepth option allows you to specify the verification depth (i.e. the maximum permissible number of certificates between the server certificate and the certificate known to the service task).
The default for the maximum depth is 1. In this case, if it is to be accepted, the server certificate must have been issued directly by a certificate authority (CA) known to the service task.
If the maximum depth is exceeded, the connection is aborted provided the verification of the server certificate is not disabled by means of tlsVerifyServer (see "tlsVerifyServer").
It makes no sense to specify a depth of 0. In this case, only self-signed certificates would be permissible.
tlsVerifyDepth |
<depth> |
<depth>
Number of maximum permissible certificates between the server certificate and the certificate known to the service task.
Default: 1