<pre><code>X509_STORE_CTX_set_flags(ctx, X509_V_FLAG_ALLOW_PROXY_CERTS);</code></pre>

<p>or</p>

<pre><code>X509_VERIFY_PARAM_set_flags(param, X509_V_FLAG_ALLOW_PROXY_CERTS);</code></pre>

<p>See <a href="#NOTES">&quot;NOTES&quot;</a> for a discussion on this requirement.</p>

<h2 id="Creating-proxy-certificates">Creating proxy certificates</h2>

<p>Creating proxy certificates can be done using the <a href="../man1/openssl-x509.html">openssl-x509(1)</a> command, with some extra extensions:</p>

<pre><code>