Dr Stephen Henson wrote: > You need a copy of the root and intermediate CA certificates. How you > get these depends on the CA. Verisign certificates aren't all available > from their site but Thawtes are. Also several CA certificates are > already included in OpenSSL, so you may not need to do anything. > > You can also extract the CA certificates from the browser. For example > if it is Netscape/MSIE then just export the certificate to a PKCS#12 > file and do: Or get it from http://www.columbia.edu/~ariel/good-certs/ns45/ Martin -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ INET, a.s. Mgr. Martin Kuba Kralovopolska 139 e-mail: [EMAIL PROTECTED] 601 12 Brno WWW: http://www.inet.cz/~makub/ Czech Republic tel: +420-5-41242414/33 -------------------------------------------------------------------- PGP fingerprint = D8 57 47 E5 36 D2 C1 A1 C3 48 B2 59 00 58 42 27 http://wwwkeys.cz.pgp.net:11371/pks/lookup?op=index&search=makub -------------------------------------------------------------------- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
