All,

 

I am having trouble with verifying client certificates.  I obtained a signed
server cert from CACert.org.  I have been trying to use that cert to issue
client certs.  The following verification error appears:

 

>openssl verify -CAfile zmodem.crt newcerts/01.pem

newcerts/01.pem: /C=US/ST=Virginia/O=Anthony Grossi/OU=Anthony
Grossi/CN=zmodem.com/[EMAIL PROTECTED]

error 20 at 0 depth lookup:unable to get local issuer certificate

 

I can verify the server cert with the CACert.org cert:

 

>openssl verify -CAfile cacert.crt zmodem.crt

zmodem.crt: OK

 

I have digged through the archives.  There are suggestions posted.  I have
tried all, to no avail.  Any help would be appreciated.

 

The certs are below:

 

The CA Cert (cacert.org)

 

-----BEGIN CERTIFICATE-----

MIIHPTCCBSWgAwIBAgIBADANBgkqhkiG9w0BAQQFADB5MRAwDgYDVQQKEwdSb290

IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNB

IENlcnQgU2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRA

Y2FjZXJ0Lm9yZzAeFw0wMzAzMzAxMjI5NDlaFw0zMzAzMjkxMjI5NDlaMHkxEDAO

BgNVBAoTB1Jvb3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEi

MCAGA1UEAxMZQ0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJ

ARYSc3VwcG9ydEBjYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC

CgKCAgEAziLA4kZ97DYoB1CW8qAzQIxL8TtmPzHlawI229Z89vGIj053NgVBlfkJ

8BLPRoZzYLdufujAWGSuzbCtRRcMY/pnCujW0r8+55jE8Ez64AO7NV1sId6eINm6

zWYyN3L69wj1x81YyY7nDl7qPv4coRQKFWyGhFtkZip6qUtTefWIonvuLwphK42y

fk1WpRPs6tqSnqxEQR5YYGUFZvjARL3LlPdCfgv3ZWiYUQXw8wWRBB0bF4LsyFe7

w2t6iPGwcswlWyCR7BYCEo8y6RcYSNDHBS4CMEK4JZwFaz+qOqfrU0j36NK2B5jc

G8Y0f3/JHIJ6BVgrCFvzOKKrF11myZjXnhCLotLddJr3cQxyYN/Nb5gznZY0dj4k

epKwDpUeb+agRThHqtdB7Uq3EvbXG4OKDy7YCbZZ16oE/9KTfWgu3YtLq1i6L43q

laegw1SJpfvbi1EinbLDvhG+LJGGi5Z4rSDTii8aP8bQUWWHIbEZAWV/RRyH9XzQ

QUxPKZgh/TMfdQwEUfoZd9vUFBzugcMd9Zi3aQaRIt0AUMyBMawSB3s42mhb5ivU

fslfrejrckzzAeVLIL+aplfKkQABi6F1ITe1Yw1nPkZPcCBnzsXWWdsC4PDSy826

YreQQejdIOQpvGQpQsgi3Hia/0PsmBsJUUtaWsJx8cTLc6nloQsCAwEAAaOCAc4w

ggHKMB0GA1UdDgQWBBQWtTIb1Mfz4OaO873SsDrusjkY0TCBowYDVR0jBIGbMIGY

gBQWtTIb1Mfz4OaO873SsDrusjkY0aF9pHsweTEQMA4GA1UEChMHUm9vdCBDQTEe

MBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0

IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2Vy

dC5vcmeCAQAwDwYDVR0TAQH/BAUwAwEB/zAyBgNVHR8EKzApMCegJaAjhiFodHRw

czovL3d3dy5jYWNlcnQub3JnL3Jldm9rZS5jcmwwMAYJYIZIAYb4QgEEBCMWIWh0

dHBzOi8vd3d3LmNhY2VydC5vcmcvcmV2b2tlLmNybDA0BglghkgBhvhCAQgEJxYl

aHR0cDovL3d3dy5jYWNlcnQub3JnL2luZGV4LnBocD9pZD0xMDBWBglghkgBhvhC

AQ0ESRZHVG8gZ2V0IHlvdXIgb3duIGNlcnRpZmljYXRlIGZvciBGUkVFIGhlYWQg

b3ZlciB0byBodHRwOi8vd3d3LmNhY2VydC5vcmcwDQYJKoZIhvcNAQEEBQADggIB

ACjH7pyCArpcgBLKNQodgW+JapnM8mgPf6fhjViVPr3yBsOQWqy1YPaZQwGjiHCc

nWKdpIevZ1gNMDY75q1I08t0AoZxPuIrA2jxNGJARjtT6ij0rPtmlVOKTV39O9lg

18p5aTuxZZKmxoGCXJzN600BiqXfEVWqFcofN8CCmHBh22p8lqOOLlQ+TyGpkO/c

gr/c6EWtTZBzCDyUZbAEmXZ/4rzCahWqlwQ3JNgelE5tDlG+1sSPypZt90Pf6DBl

Jzt7u0NDY8RD97LsaMzhGY4i+5jhe1o+ATc7iwiwovOVThrLm82asduycPAtStvY

sONvRUgzEv/+PDIqVPfE94rwiCPCR/5kenHA0R6mY7AHfqQv0wGP3J8rtsYIqQ+T

SCX8Ev2fQtzzxD72V7DX3WnRBnc0CkvSyqD/HMaMyRa+xMwyN2hzXwj7UfdJUzYF

CpUCTPJ5GhD22Dp1nPMd8aINcGeGG7MW9S/lpOt5hvk9C8JzC6WZrG/8Z7jlLwum

GCSNe9FINSkYQKyTYOGWhlC0elnYjyELn8+CkcY7v2vcB5G5l1YjqrZslMZIBjzk

zk6q5PYvCdxTby78dOs6Y5nCpqyJvKeyRKANihDjbPIky/qbn3BHLt4Ui9SyIAmW

omTxJBzcoTWcFbLUvFUufQb1nA5V9FrWk9p2rSVzTMVD

-----END CERTIFICATE-----

 

My Server CERT:

 

-----BEGIN CERTIFICATE-----

MIIExjCCAq6gAwIBAgIDBF4kMA0GCSqGSIb3DQEBBQUAMHkxEDAOBgNVBAoTB1Jv

b3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZ

Q0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9y

dEBjYWNlcnQub3JnMB4XDTA3MTIwMzIyMzExNFoXDTA4MDUzMTIyMzExNFowFTET

MBEGA1UEAxMKem1vZGVtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC

ggEBAMNYT45fk+z1oCXKG9b0soDyIPnfS9UXlOPjpaQgdWNXXkllFfZrhwoP+IC9

E+wcMCJVzFEgY+1Ax09l/OHp3QOUtK3RiZtmYhKe/5yktHQ3D9++bbbAyFvWhICl

8lVrY22leRyuk0EAXmIk1N0Sbjjb9LlpVDX1eS9a7ReZNLtrZC24P7IhRV1gSaB6

1lxRfrcOD196s4AO5PtRl42emFjSa9Of19idJY3diQPqspqkvoFMGitjcLgUgJSo

q3YJP3TKRLQqD8gJnOWKmPUxQop1SaDRUMZ9EgxeO+4dlR95eGx/PRcykNx2wQBR

iUz/qAoSHk9kdVSu0vLSWZwYOXUCAwEAAaOBujCBtzAMBgNVHRMBAf8EAjAAMDQG

A1UdJQQtMCsGCCsGAQUFBwMCBggrBgEFBQcDAQYJYIZIAYb4QgQBBgorBgEEAYI3

CgMDMAsGA1UdDwQEAwIFoDAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAGGF2h0

dHA6Ly9vY3NwLmNhY2VydC5vcmcvMC8GA1UdEQQoMCaCCnptb2RlbS5jb22gGAYI

KwYBBQUHCAWgDAwKem1vZGVtLmNvbTANBgkqhkiG9w0BAQUFAAOCAgEAVsqOlNf2

YqYcQBcuQKxueNQ+E7JraKbfLngm5EOXUEZSILoE8vspUyxHO9+4fEawN2Vb1BSb

LouhGzrQYKaD7+1Kwom6cFCzf+btbUpCWAGdP6LtYMPik2y7gsLGaUxXUAlpcs5E

N38Db8XOBVlDItWCeucn68iFPMyB+1fV8pNNkLAytBG9RtB2y2Elbfn05pvwkIxn

r3nrOLjpH0XCVTinxXR+n1rKy68EeKuk+teULZ0DINwXEO+lUoj2vxHqZjKUmUdC

lXtCgblpIttgT97ZQynijH1LMmLdsYcVxgImo6gOEGv2wSxiMVPkMkX2325OPeFP

hMlx4n9Ge4napCQ40OD9QJpJ9WO/2KIvvTiUY/g4ie4lYCngDnrFZF0SI4eaeh7x

+OOBxKYnRnlAdHA1uHPdamcbbD+VclfvRpFVCqiBojg67AD6uMUdGiASwuqN3t1Q

fPWzRqCrbXHxInRPLhpR9QE+ke/a1GYULUEtNIPEtr4eAX8lL1rJ3EQg9u31OlaV

S63lA+1lvL8kKPJwWP6NeUkQdKmUbY1eELzTKLWiFfeRxJNyUdXYRmSsgOKJ1TOl

V3oPsYTnfPSzbPcORbIlNhu3bQ0J+MTY7wJWdFIROs2GCL3sGFW683kM2rJ6wtb3

teu4vVjdm1OZ0vLAASi7PPNnPTDNjh3w3uk=

-----END CERTIFICATE-----

 

The client cert:

 

-----BEGIN CERTIFICATE-----

MIIFCTCCA/GgAwIBAgIBATANBgkqhkiG9w0BAQUFADAVMRMwEQYDVQQDEwp6bW9k

ZW0uY29tMB4XDTA3MTIwOTIxNDQyMFoXDTA4MDUwNzIxNDQyMFowgYoxCzAJBgNV

BAYTAlVTMREwDwYDVQQIEwhWaXJnaW5pYTEXMBUGA1UEChMOQW50aG9ueSBHcm9z

c2kxFzAVBgNVBAsTDkFudGhvbnkgR3Jvc3NpMRMwEQYDVQQDEwp6bW9kZW0uY29t

MSEwHwYJKoZIhvcNAQkBFhJhbnRob255QHptb2RlbS5jb20wggIiMA0GCSqGSIb3

DQEBAQUAA4ICDwAwggIKAoICAQCdYHvF3xAqxSGBvqTVEBaMhvSXzTPVf60s01se

vnNW4AyQvYcUqANOKJRu+Y4uowWaARmW8F0ptUMjKCndX7VyejzyQT4UJBs5g25t

QVga4xdCEzDA9AMqrcFZ09+7KIgrTHf1ELWLV40GaYSPuuKk9iGIAF8oSxYgkIB2

WgwVvHnu6PcKfc/HvdglmPx+Or2wLN1yzYhSv59wpabtgsSF7TJuscoHE3alRWmJ

U/XkqUlA8YmJqEcliDBqErrOJp/+MU7locELbdMwyTgtxYfjvLtLLKwHVzk8gMy1

SuBePS5IhspJbUG/j+3xHXpApjXuK6sMMbigqqd5af6DDvxqVdrLJtejElyUhhM6

RUESiRzLxswrj//isDps0WsIU+q6krdKA+HpG/CQEa6yzoQSLH5PAqz3s6+ogu4w

r52oEOEhvHpkKxVtzl0WSFewqLgJvtxIliIDWGoDVs/3vtic28sLFpZeHZ4rlyMl

RyljhTOuNk+BR1k5acUFij8U88kpOd8xAGuR3Ha4yPgkL8n1iD/bl1NFMlQ3sP5G

hLNUkgg5YjWUknlQBC8y4FBDQFiaJ8CWUqu7OqTeNeMN0s5acLTNa5+rTBX0p4CA

BKscXVyV54lHWEfJq4L6NP8H8OhX6ZPrbZD8fvIcg3xkUdal+/tTN7H5OWY3hnFH

GrZKgwIDAQABo4HtMIHqMAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8WHU9wZW5T

U0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBT9LVACqrKgE/rgTBoe

d1zXklAClzCBjwYDVR0jBIGHMIGEoX2kezB5MRAwDgYDVQQKEwdSb290IENBMR4w

HAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQg

U2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0

Lm9yZ4IDBF4kMA0GCSqGSIb3DQEBBQUAA4IBAQC0kl6Wl9wgW4D/7k+smXgnlEHm

JBl2p6aLN0Ql2uGK2SchXET6mK0HA3EQtDvcoNhvxdoi5KenRX5iAhCTQA2pDBqA

uZPqVPAVFapHfMYbWRYyCV7C+v5bE8aD4L5OJKxWZpl/UmVzaNetwOk2umEP1n91

+D8R1+zDEC7ngkImiTGEXhmZ6kf/svdBD6aRfpZh6j0H1nsAdOBP5UPyTw6QywI0

sMFjlUp61ypQtZA2qM5z9SnPtDMq+0PckEeVmxWWK7tHxqe6P8xsywKU6Fr1fCQM

TBw5Z+8xmU//irV4LrtssWMDdfXXfDLoTNPkjDO4YGqDkl8/CoR3BnXmTPtG

-----END CERTIFICATE-----

 

 

 

 

 

v/r,

 

Anthony

 

Reply via email to