Hi vinni,

As a hint  i will reformulate how i understand your problem

The server cannot accept the client certificate because it cannot check that the certificate have been issued by a trusted CA.

This arise because the CA certificate is not available so the questios are
      1) Is the CA certificate available to your program
      2) If it is available, why the program does not use it

I hope this help

Dominique


vinni rathore a écrit :

hi,

i am stuck with the error "Unable to get local issuer certificate" and then "SSL3_GET_CLIENT_CERTIFICATE: peer certificate not return".

I have created my own certificates using Openssl.exe . I have created CACert.pem which is self signed CA certificate and then two other certificates one is ClientCert.pem and other is ServerCert.pem which are signed from the CACert.pem.

I have created OpenSSL server and other side a client supporting Other type of library(XySSL). There is no problem at client side. Certificate loading got success but verification fails with the above written error message.

i am using ssl_ctx and its API's for certificate loading and a callback function for verification using SSL_ctx_set_verify(ctx, <PEER_Verification MODE>, callback function)

Is something i doing wrong ...???
or anything more required..???

please help..

Thanks and regards,




--
regards,
Vineeta Kumari
Software engg
Mobera Systems
Chandigarh


--
Dr Dominique LOHEZ
ISEN
41, Bd Vauban
F59046 LILLE
France

Phone : +33 (0)3 20 30 40 71
Email: [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to