On Sat April 23 2011, James Chase wrote: > > I have done this multiple years in a row with the exact same process but > > now I get the following error when I try to create my SSL: > >
Has worked for years and now it fails? OK, what changed? From: http://www.openssl.org/docs/apps/pkcs12.html -chain If this option is present then an attempt is made to include the entire certificate chain of the user certificate. The standard CA store is used for this search. If the search fails it is considered a fatal error. Any changes made in your "standard CA store" or its contents since the last time your command worked? I.E: Your process has remainned the same but have the supporting materials remainned the same on your system? Are you even using the same system now? Has something expired during the time lapse since it last worked? Mike > > openssl pkcs12 -export -chain -CAfile cachain.crt -out my.domain.com.p12 > > -inkey my.domain.com.key -in MY.DOMAIN.COM.crt > > Error unable to get local issuer certificate getting chain. > > > > I just tried requesting a new certificate with a new CSR and re-downloaded > all the files but still have the same results. Can someone offer any advice? > I'm at a total loss here. > > The only way I can get the p12 created is by not including the chain, but > then the SSL is worthless > > > > > -- > > "Beware of all enterprises that require new clothes." > > -- Henry David Thoreau > > > > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
