have <code>openssl</code> installed on your machine.</p><ol><li><p>Sleep 20 seconds for the mTLS policy to take effect before retrieving the certificate chain
of <code>httpbin</code>. As the CA certificate used in this example is self-signed,
the <code>verify error:num=19:self signed certificate in certificate chain</code> error returned by the
openssl command is expected.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ sleep 20; kubectl exec &#34;$(kubectl get pod -l app=sleep -n 