All,
Trying to verify a message I've just signed with openssl, I've got this message
:
********************************
Verification Failure
381:error:21075075:PKCS7 routines:PKCS7_verify:certificate verify error:pk7_smim
e.c:205:Verify error:unable to get local issuer certificate
********************************
In pk7_smime.c the code is
201:i = X509_verify_cert(&cert_ctx);
202:if (i <= 0) j = X509_STORE_CTX_get_error(&cert_ctx);
203:X509_STORE_CTX_cleanup(&cert_ctx);
204:if (i <= 0) {
205: PKCS7err(PKCS7_F_PKCS7_VERIFY,PKCS7_R_CERTIFICATE_VERIFY_ERROR);
206: ERR_add_error_data(2, "Verify error:",
207: X509_verify_cert_error_string(j));
208: sk_X509_free(signers);
209: return 0;
210: }
Is something wrong in my command line which is "openssl smime -verify -in ficout
-certfile toto.cer" ?
Is a file missing ?
Can Netscape or IE preferences be involved in this message ?
Signing was correct in my opinion with :
********************************
openssl smime -sign -in ficin -out ficout -signer toto.cer -inkey toto.key -des3
********************************
Where could I find command line examples of the smime utility with openssl
(others than in smime.pod) ?
Thx
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
