Re: Problem with creating p12 file with chain

[Bernhard Froehlich]

Reinhardt, Karen - Contractor schrieb:

Hi All,

I am attempting to create a p12 file which will include both intermediate and root CA certificates in addition to the key and server certificate. I keep getting "Error unable to get local issuer certificate getting chain". I have checked the subject, issuer, AKI, and SKI for all certs and everything seems right (see below). Can someone please tell me what I'm missing here or what I should look at next in troubleshooting? Command: openssl pkcs12 -export -in ../testprod.pem -inkey ../testprod.key -out ../testprod.p12 -name "tomcat" -CAfile ../IssuingCA.pem -caname "Issuing CA" -CAfile ../RootCA.pem -caname "Root CA" -chain

You cannot specify multiple -CAfile arguments. Try to concatenate your CA certificates into one file.

Hope it helps.
Ted
;)

--
PGP Public Key Information
Download complete Key from http://www.convey.de/ted/tedkey_convey.asc
Key fingerprint = 31B0 E029 BCF9 6605 DAC1  B2E1 0CC8 70F4 7AFB 8D26

smime.p7s
Description: S/MIME Cryptographic Signature