On 07/25/2019 09:26 AM, Gordon Sim wrote:
On 25/07/2019 10:11 am, Jose Alberto Fernandez Parejo wrote:
2019-07-25 11:11:04 [System] debug Exception constructed: Failed: NSS
error [-8172]
(/local/users/jafparejo/Downloads/qpid-cpp-master-1.41/src/qpid/sys/ssl/SslSocket.cpp:205)

2019-07-25 11:11:04 [Security] debug Failed to connect: Failed: NSS
error [-8172]

-8172 is 'Peer's certificate issuer has been marked as not trusted by
the user.' I.e. the CA is not marked as a trusted CA in the database. If
you list the certs in the db, what trust flags do you see for the CA? It
should have CT in it.


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

.


The flags are set to u. And you say 'CT'. We have imported from openssl
this certificates. Maybe something missing?


certutil -L  -d db

Certificate Nickname                             Trust Attributes
                                                SSL,S/MIME,JAR/XPI

127.0.0.1                                                    u,u,u

Thanks for your help

________________________________

Este correo electrónico y, en su caso, cualquier fichero anexo al mismo, 
contiene información de carácter confidencial exclusivamente dirigida a su 
destinatario o destinatarios. Si no es vd. el destinatario indicado, queda 
notificado que la lectura, utilización, divulgación y/o copia sin autorización 
está prohibida en virtud de la legislación vigente. En el caso de haber 
recibido este correo electrónico por error, se ruega notificar inmediatamente 
esta circunstancia mediante reenvío a la dirección electrónica del remitente.
Evite imprimir este mensaje si no es estrictamente necesario.

This email and any file attached to it (when applicable) contain(s) 
confidential information that is exclusively addressed to its recipient(s). If 
you are not the indicated recipient, you are informed that reading, using, 
disseminating and/or copying it without authorisation is forbidden in 
accordance with the legislation in effect. If you have received this email by 
mistake, please immediately notify the sender of the situation by resending it 
to their email address.
Avoid printing this message if it is not absolutely necessary.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to