Indy 10 SSL RootCertFile

[JimD]

It appears that Indy 10 doesn't require the RootCertFile if the Server cert is trusted by the OS.
Is this correct or is there more to it on other platforms or other situations?

Code: Pascal  [Select][+][-]

1.   OpenSSL:=TIdServerIOHandlerSSLOpenSSL.Create;
2.   with OpenSSL.SSLOptions do begin
3.     CertFile      := 'Server.crt.pem';
4.     KeyFile       := 'Server.key.pem';
5.     RootCertFile  := ''; // OK to not specify if the RootCA.crt.pem is trusted by the OS?
6.   end;  
7.  

Since the RootCertFile is not required, the password won't be requested.

Code: Pascal  [Select][+][-]

1.   with OpenSSL do begin
2.     OnGetPassword := @OpenSSLGetPassword;
3.   end;
4.