On Sat, Oct 10, 2009, Arno Garrels wrote: > Hi, > > VeriSign issued some different CA certificates with the same > subject (see below). One of such a pair will always fail with > error "X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT". > However these certificates are part of the Windows Root Certificate > Program: http://support.microsoft.com/?scid=kb%3Ben-us%3B931125 > My Windows application must support them as well, how to work > around this issue?
They also seem to have the same public key as well and they are deprecated V1 certificates. At least they aren't MD2. Can you be more specific about the circumstances of the errors? With the same key and DNs you shouldn't need to install them both anyway: paths should verify with only one installed. > Why are issuers looked up by subject at all? > Because that's what the standards (X.509, RFC3280 et al) require. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
