Re: unable to get local issuer certificate

[Bernhard Froehlich]

On 8/28/06, Milan Tomic <[EMAIL PROTECTED]> wrote:

While atempting to establish SSL connection I got this OpenSSL error:


[...]

Certificate Verification: Error (20): unable to get local issuer certificate

One of the possible reasons for this error is that the server cert is signed by an intermediate CA and the server is not configured to send the intermediate CAs certificate. If that's the problem you either have to include the intermediate CAs cert on client site as a trusted CA or the server has to be configured to send the certificate automatically. See http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcertificatechainfile if you are using Apache.

Hope it helps.
Ted
;)

--
PGP Public Key Information
Download complete Key from http://www.convey.de/ted/tedkey_convey.asc
Key fingerprint = 31B0 E029 BCF9 6605 DAC1  B2E1 0CC8 70F4 7AFB 8D26

BTW, it would help in such cases to include the server's certificate in the mail... ;)

smime.p7s
Description: S/MIME Cryptographic Signature