The -Z VerifyDepth option is used to define the verification depth, in other words the maximum permissible number of certificates between the TELNET client certificate and the certificate which is known to the TELNET server.
Here you must note the following:
If the value 1 (default) is specified as the maximum depth, the server certificate must have been signed directly by a CA (Certificate Authority) that the TELNET client knows for it to be accepted.
If the maximum depth is exceeded, the connection is cleared, unless verification of the TELNET server certificate has been disabled with
-Z VerifyClient=NONE(see "-Z VerifyClient") or-Z VerifyClient=OPTIONAL.Specifying the depth as 0 is meaningless. In this case only self-signed certificates would be permissible.
-Z VerifyDepth |
=<integer 0..32767> |
<integer 0..32767>
Maximum permissible number of certificates between the TELNET client certificate and the certificate which is known to the TELNET server.
Default: 1