Re: Help creating certificate chain

2013-03-04 Thread ashish2881
Please let me know the openssl commands So far I've create a Root CA I created an intermediate CA and signed it's certificate with the Root CA I created an end user certificate and signed it with the intermediate CA. Thanks -- View this message in context: http://openssl.6102.n7.nabble.com/He

Re: Help creating certificate chain

2010-07-19 Thread Hugo Garza
Thanks a lot for the explanation Patrick, that did the trick! On Fri, Jul 16, 2010 at 1:58 PM, Patrick Patterson < ppatter...@carillonis.com> wrote: > Hello Hugo: > > On July 16, 2010 02:31:53 pm Hugo Garza wrote: > > Hello Stephen, thank you for your comment that made the verification > pass. >

Re: Help creating certificate chain

2010-07-18 Thread depinder singh deol
hi hugo, put the rootca and intermediate ca certs in two files (one for subca1 and other for subca2)..(in the order rootca>>subca in the file)suppose it is root_subca.pem.Do this on for both subca's i.e root_subca1.pem and root_subca2.pem.and use the export command on user 1#export SSL_CERT_FILE="p

Re: Help creating certificate chain

2010-07-17 Thread Patrick Patterson
users@openssl.org > Subject: Re: Help creating certificate chain > > Hello Hugo: > > On July 16, 2010 02:31:53 pm Hugo Garza wrote: >> Hello Stephen, thank you for your comment that made the verification pass. >> But I'm a bit confused now. >> >> Just as

RE: Help creating certificate chain

2010-07-16 Thread Rene Hollan
What? No plug for pathfinder? -Original Message- From: owner-openssl-us...@openssl.org on behalf of Patrick Patterson Sent: Fri 7/16/2010 11:58 AM To: openssl-users@openssl.org Subject: Re: Help creating certificate chain Hello Hugo: On July 16, 2010 02:31:53 pm Hugo Garza wrote

Re: Help creating certificate chain

2010-07-16 Thread Dr. Stephen Henson
On Fri, Jul 16, 2010, Hugo Garza wrote: > Hello Stephen, thank you for your comment that made the verification pass. > But I'm a bit confused now. > > Just as a demo I moved these certs to my windows computer and installed the > Root CA into my current user's Trusted Root Certificate Authorities

Re: Help creating certificate chain

2010-07-16 Thread Patrick Patterson
Hello Hugo: On July 16, 2010 02:31:53 pm Hugo Garza wrote: > Hello Stephen, thank you for your comment that made the verification pass. > But I'm a bit confused now. > > Just as a demo I moved these certs to my windows computer and installed the > Root CA into my current user's Trusted Root Certi

Re: Help creating certificate chain

2010-07-16 Thread Hugo Garza
Hello Stephen, thank you for your comment that made the verification pass. But I'm a bit confused now. Just as a demo I moved these certs to my windows computer and installed the Root CA into my current user's Trusted Root Certificate Authorities folder using the MMC certificates snap in. Then I d

Re: Help creating certificate chain

2010-07-16 Thread Hugo Garza
Thanks Jakob, I just tried what you said by concatinating the Root and Intermediate certificates to the user.crt file and tried running openssl verify -CAfile ../root/ca-cert.crt user.crt But it still fails with, error 20 at 0 depth lookup:unable to get local issuer certificate. I would prefer

Re: Help creating certificate chain

2010-07-16 Thread Dr. Stephen Henson
On Thu, Jul 15, 2010, Hugo Garza wrote: > Hello All, I'm trying to get a basic root CA setup with an intermediate CA > to handle all the end user certificate signing. > > So far I've created a Root CA > I created an intermediate CA and signed it's certificate with the Root CA > I created an end u

Re: Help creating certificate chain

2010-07-16 Thread Jakob Bohm
On 15-07-2010 21:26, Hugo Garza wrote: Hello All, I'm trying to get a basic root CA setup with an intermediate CA to handle all the end user certificate signing. So far I've created a Root CA I created an intermediate CA and signed it's certificate with the Root CA I created an end user certific

RE: Help creating certificate chain

2010-07-16 Thread Smith, Ryan-P56787
All of the CA certificates in the chain of trust need to be included in the CA file passed to the "-CAfile" option. To do this, simply concatenate all of the PEM-encoded CA certificates into one file (e.g. 'cat > cafile.pem' -- could be 'cat ../root/ca-cert.crt ../int/ca-cert.crt > cafile.pem').