----- Original Message -----
From: Carl-Henrik Tano <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, June 06, 1999 8:56 AM
Subject: Problems with creating certificates and how to use them


> Hi !
>
> I�m trying to add SSL to my httpserver and httpclient.
> I have tried to use openssl to create certificates and set up my own CA
> but I can�t get it work.(Only for testing)
>
> I need some hints about:
> - How to set up my own CA and create one server certificate and one
> client certificate thats signed by my CA.
> - I also want to know how to make the created certificates to work in my
> programs. That means how to tell my applications where to
> look for my CA and what I must do to make my server get the clients
> certificate.
>
Please look at CA.sh in openssl. It is there in openssl0.9.2b.

> I have tried to create certificates and use them in my programs but have
> never get the server to find my client certificate.
> When I have created one certificate and want to run verify I always get
> error 20 at 0 depth lookup:unable to get local issuer certificate.
> For example when I�m trying to verify one of the test certificates that
> comes with openssl I get:
> openssl>verify server.pem
> server.pem: /C=AU/ST=Queensland/O=CryptSoft Pty Ltd/CN=Server test cert
> (512 bit)
> error 20 at 0 depth lookup:unable to get local issuer certificate
>
> Have I missed something important?
Maybe you should first setup you own CA and sign your own certificate and
try again.

>
> I�m using version 0.9.3a of openssl.
>
> /Henrik
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to