Richard Moore <[email protected]> wrote: > Your chain file includes the root certificate as well as the > intermediate certificate. You should not be transmitting that one
There has been one unrelated certificate (the one for the User CA) in the chain which caused the problem. Sending the root cert is probably tolerated. I did not check this. What I have now is the following: SSLCertificateChainFile /path/to/file/with/all/intermediate/certs SSLCACertificateFile /path/to/file/with/all/certs/including/root Anything else causes trouble. My first try has been to put all certificates into one file and point SSLCertificateChainFile and SSLCACertificateFile to this file. So I definitely think gnutls should be more tolerant about certificates which are not in use but provided anyway. Regards Sven -- "In my opinion MS is a lot better at making money than it is at making good operating systems" (Linus Torvalds, August 1997) /me is giggls@ircnet, http://sven.gegg.us/ on the Web _______________________________________________ Help-gnutls mailing list [email protected] https://lists.gnu.org/mailman/listinfo/help-gnutls
