Hi Amar,
Inserting absolute path name for the CA cert did the trick.

thanks!
Ashu

Amar Desai wrote:

>
> Hi
>
>> Hi,
>> I'm trying to load the CA certificate and create a store using the
>> X509_STORE_load_locations() function, but the function seems to fail. I
>> am using absolute path of the CA directory as an argument, which is
>> different from the /etc/ssl/certs location. Is it necessary to put the
>> CA certs in the /etc/ssl/certs location? Here's the code:
>>
>>  X509_STORE *store;
>>  X509_LOOKUP *lookup;
>>
>>  /* create the cert store and set the verify callback */
>>  if (!(store = X509_STORE_new ())){
>>      fprintf (stderr, "Error creating X509_STORE_CTX object\n");
>>      goto err1;
>>    }
>>
>>  X509_STORE_set_verify_cb_func (store, VerifyCallback);
>>
>>  if (!X509_STORE_load_locations(store, CA_FILE, CA_DIR)){
>>      fprintf (stderr, "Error loading the CA file or directory\n");
>>      goto err1;
>>    }
>>
>> where
>>
>> #define CA_FILE "cacert.pem"
>> #define CA_DIR "/docs/openssl/CA/certs"
>>
>
> Is "cacert.pem" is in your current directory? Have you tried absolute
> path for file as well? And last thing does you file "cacert.pem "
> contains atleast one good certificate?
>
> I hope this will help you.
>
> Regards
> Amar
>
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to