Can't seem to install these correctly. 

I "installed" the cer files in the root pack

ln -s C1_PCA_G3v2.cer `/usr/local/ssl/bin/openssl x509 -hash -noout -in
C1_PCA_G3v2.cer`.0
ln -s C2_PCA_G3v2.cer `/usr/local/ssl/bin/openssl x509 -hash -noout -in
C2_PCA_G3v2.cer`.0
ln -s C3_PCA_G3v2.cer `/usr/local/ssl/bin/openssl x509 -hash -noout -in
C3_PCA_G3v2.cer`.0
ln -s C4_PCA_G3v2.cer `/usr/local/ssl/bin/openssl x509 -hash -noout -in
C4_PCA_G3v2.cer`.0

In the client openssl code I have SSL_CTX_load_verify_locations passing NULL
for the file and the correct path 

However when connecting to the remote server I get

curl_dip> Connection to host established.
-Error with certificate at depth: 1
  issuer   = /C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification
Auth
ority
  subject  = /O=VeriSign Trust Network/OU=VeriSign, Inc./OU=VeriSign
Internation
al Server CA - Class 3/OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY
LTD.(c)9
7 VeriSign
  err 20:unable to get local issuer certificate
curl_dip> SSL_connect: -1, error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICA
TE:certificate verify failed

This is the pack I got from Verisign


01/07/2000  12:38 PM             1,054 C1_PCA_G3v2.509
01/07/2000  01:57 PM             1,508 C1_PCA_G3v2.cer
01/07/2000  12:41 PM             1,053 C2_PCA_G3v2.509
01/07/2000  01:57 PM             1,504 C2_PCA_G3v2.cer
01/07/2000  12:46 PM             1,054 C3_PCA_G3v2.509
01/07/2000  01:57 PM             1,508 C3_PCA_G3v2.cer
01/07/2000  12:50 PM             1,054 C4_PCA_G3v2.509
01/07/2000  01:58 PM             1,508 C4_PCA_G3v2.cer
04/21/1999  08:44 AM             1,066 Class1PCA_G2_v2.b64
04/13/1999  10:25 AM               774 Class1_PCA_G2_v2.509
04/07/1999  12:33 AM             1,070 Class2PCA_G2_v2.b64
04/06/1999  01:23 PM               775 Class2_PCA_G2_v2.509
04/07/1999  12:33 AM             1,066 Class3PCA_G2_v2.b64
04/06/1999  01:27 PM               774 Class3_PCA_G2_v2.509
04/07/1999  12:32 AM             1,066 Class4PCA_G2_v2.b64
04/06/1999  01:31 PM               774 Class4_PCA_G2_v2.509
04/13/2001  08:38 AM               538 MD5 Fingerprints.txt
04/06/1999  01:01 PM               577 PCA1ss_v4.509
04/07/1999  12:34 AM               798 Pca1ss_v4.b64
03/30/1999  11:48 AM               576 PCA2ss_v4.509
04/07/1999  12:34 AM               792 Pca2ss_v4.b64
04/06/1999  01:12 PM               576 PCA3ss_v4.509
04/07/1999  12:33 AM               792 Pca3ss_v4.b64
08/12/2003  07:17 AM             1,853 Roots ReadMe.txt
03/04/1998  10:25 AM               568 SecureServer.509
04/07/1999  12:39 AM               784 SecureServer.b64
05/04/2001  02:46 PM               727 SHA1 Fingerprints.txt
05/23/2000  03:52 PM            10,708 VeriSignRootInfo2.txt
09/26/2000  08:50 AM               977 VeriSign_TSA_CA.509
10/25/2000  05:10 PM             1,402 VeriSign_TSA_CA.txt
10/25/2000  05:11 PM             2,745 VeriSign_TSA_CA_printout.txt

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to