Hello Peter, Yeah it looks like you're missing the root certificate, strangely since it should be included everywhere as a COMODO-signed certificate.
Here's the Gandi intermediate certificate retrieval page: http://wiki.gandi.net/en/ssl/intermediate Note that we're using "Standard SSL". Cheers, -- Valérian Saliou Jappix & FrenchTouch Web Agency founder. Uno IM product lead. More about me on my personal page. On Sep 11, 2013, at 5:56 AM, Peter Saint-Andre <[email protected]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 8/28/13 11:43 AM, Marco Cirillo wrote: >> Authorized to do it on behalf of the owner, The entry should be >> updated as follows: >> >> domain: [jappix.com] website: [https://jappix.com] year launched: >> [2010] country: [FR] latitude: [48.8667] longitude: [2.3333] CA: >> [Gandi] server software: [Metronome] admin name: [Valérian Saliou] >> admin JID: [[email protected]] description: [The Jappix XMPP >> service.] > > Which Gandi root (actually intermediate) certificate do you use? When > I test with the Gandi "Standard SSL" cert [1] using OpenSSL [2], I get: > > Verify return code: 20 (unable to get local issuer certificate) > > Perhaps I'm missing their root certificate? > > Peter > > [1] https://www.gandi.net/ssl/documentation > > [2] openssl s_client -connect jappix.com:5222 -starttls xmpp -CAfile > gandi.crt > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.19 (Darwin) > Comment: GPGTools - http://gpgtools.org > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQIcBAEBAgAGBQJSL+n0AAoJEOoGpJErxa2p2FMQAIJZoNEzZhiM+ErrOZVFop0B > QuvK1XCeW4v38a/1YFTXg56BPjJuHaFy6suysLlsxLOSaqDvJ9xY3WMw7LcU90Dp > nWamMmHQLKgVQkFkaEha7zWY88J2AYPh7cXa59ILSMVLnce53OuWgMsHqVyX69qS > rNOaQ04z0uME3Eg/XS1ce313JmlTv6b19JKUYOb+vseA4HGBf32emALzqbh89CTM > l2V8pmHtqkt1rEJ5x88DzN9cS0yu85qtB6yfbQaB648E2zxI7q5WQIftSV2I+mXu > YDfLFBXnCLop3ojOvK9VERIax/wMQHyAVt4uvbH4T56+p0L169ngqtkWM1IRqH9H > V1/VVidkLs8WODu2ViPqeO5fJ4sE87nPwPog1Zod7YrgZc5uk0Hds+yuRc4HVi3h > TTlnsmcGOzF7Gw3KW8NwrhVvljQWt+BdfLDk2bMPNgegB9PakqKnwdv69JYu4t9w > z39oJADFoZxGEXeu6fJCtiCQdLe8FFxkBqZ2EPv5Zq2xsdjcmKi4ljW0U2Ep0VuA > J8IPeKZqF5CJVRJz1DQWOkqcr9vQXzugyr3AO80DgYkvO7CUUYdwJ79xk509vfmX > i352JySKJPp/L8HKEoSETzLp38fccWayvRv43zCh0M92mc5hSsp05B7xoTcLiphr > TbzY6PechW2MfIWqK1Ue > =bXY/ > -----END PGP SIGNATURE-----
smime.p7s
Description: S/MIME cryptographic signature
