Re: Default CApath in Debian (OpenSSL 0.9.6c-2)

2005-06-05 Thread Vaclav Stepan 
Hi,

I was looking for a system-wide setting via openssl.cnf, but it seems
that there is not any. Thank you for the hint, I will adapt the client
program.

Vaclav Stepan
-- 
Vaclav Stepan
[EMAIL PROTECTED]
http://linux.fjfi.cvut.cz/~w/
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]

Default CApath in Debian (OpenSSL 0.9.6c-2)

2005-06-01 Thread Vaclav Stepan 
Hi,

I ran in trouble with the following thing. There is a Debian woody,
with OpenSSL 0.9.6c installed. I am trying to set OpenSSL so it
per default uses CA certificates in /etc/ssl/certs (I want to force
Sylpheed to actually use a CA certificate to verify server certificate).

I put the CA files to /etc/ssl/certs and generated hash names.
If I do
 openssl s_client -CApath /etc/ssl -connect ...

then OpenSSL correctly finds the CA certificate and verifies the server
certificate (return code 0).

If I omit the CApath, using the default settins, the verification fails
with
 Verify return code: 21 (unable to verify the first certificate)

I searched Google and archives - the only relevant thing I found is 
that if it is my client app, I may ask it to use some CA cert.

But how do I set a CApath per default?

Thanks for any hint

Vaclav Stepan
 -- 
Vaclav Stepan
[EMAIL PROTECTED]
http://linux.fjfi.cvut.cz/~w/


-- 
Vaclav Stepan
[EMAIL PROTECTED]
http://linux.fjfi.cvut.cz/~w/
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]