On Di, 15.02.2005, 21:53, Nicolas Ledez wrote: > Le Tue, Feb 15, 2005 at 06:47:53PM +0100, Christian Storch a �crit : >> I've tried your scripts for creating root and server certs. >> Testing with s_client on two different servers I got no errors >> but nearly the same output you've posted! > I try to find more information for my certificate. > With openssl verify -CApath /etc/ssl/certs/ -issuer_checks > imap.winch.my.crt > I have "error 29 at 0 depth lookup:subject issuer mismatch" errors. > I think it's normaly. > What command can I use to test certificate ?
Yes, I've the same error with working certs. The only simple possibility I know is to check by openssl x509 -in <certificate file> -noout -issuer -subject -startdate perhaps '-text' for more detailed information. But that's no check of trust relation! One possibility to test without a client server application is to import root cert, client cert and its key into a kind of OS made in Redmond. ;) If you want, you could send me your certs and key or make some new ones and I could test it on a couple of cyrus servers. So you could at least exclude this point of failure. Christian Christian -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
