Thanks.
The first certificate is your root CA, the second one is a version 1
certificate that can't be used as a CA (it would be insecure to allow it).
If your end-user certificate is issued by this second certificate, then
the error message is normal.
--
Erwann ABALEA
-----
anatomie: ablation chirurgicale du canard
Le 19/11/2012 18:48, Deeztek.com Support a écrit :
I'm assuming this is what you want. This is the contents of my chain
file:
-----BEGIN CERTIFICATE-----
MIIFlDCCA3ygAwIBAgIJAJsm0MjspJZLMA0GCSqGSIb3DQEBBQUAMDoxGDAWBgNV
[...]
VSjVBAcgfCJGH/rHJyOIA/xL3QrfAGMrdWaupIVgLWtBZvOrbOpLMQ==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIE8DCCAtgCAQEwDQYJKoZIhvcNAQEFBQAwOjEYMBYGA1UEAxMPY2EzLmRlZXp0
[...]
LMJHeiywxLvyFl6uPSjjMjTzcXk=
-----END CERTIFICATE-----
On 11/19/2012 11:26 AM, Erwann Abalea wrote:
Can you post here the certificate chain? Not the private key, only
the certificates, from the root down to the end-entity.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org