$ vnfsdk csar-validate /tmp/output11.csar
cms: Unrecognized flag no_signer_cert_verify
ERROR:vnfsdk_pkgtools.packager.utils:Executing ['openssl', 'cms', '-verify', '-no_signer_cert_verify', '-in', '/tmp/tmp4khfdzax', '-inform', 'PEM', '-content', '/tmp/tmpaa3y_2yo', '-certfile', '/tmp/tmpcanap6w8/test.crt'] failed with return code 1, output: b''

$ openssl version
OpenSSL 1.1.1 11 Sep 2018

However, the above command works with OpenSSL version 1.0.2g 1 Mar 2016