Hello all,
I installed a apache+mod_ssl+openSSL server, but it can't verify my client certificate.
The server log is
[01/Aug/2002 15:29:21 27838] [trace] Certificate Verification: depth: 1, subject
: /CN=ChinaPay Publish System, issuer: /C=CN/CN=Chinapay Root CA
[01/Aug/2002 15:29:21 27838] [error] Certificate Verification: Error (24): inval
id CA certificate
[01/Aug/2002 15:29:21 27838] [trace] OpenSSL: Write: SSLv3 read client certifica
te B
[01/Aug/2002 15:29:21 27838] [trace] OpenSSL: Exit: error in SSLv3 read client c
ertificate B
Why?
I can use following command to verify my client cert:
[root@localhost ssl.crt]# openssl verify -verbose -CApath `pwd` cli.crt
cli.crt: OK
My certificate's CA level is
Chinapay Root CA
|
ChinaPay Publish System
|
My Client Cert
Thank you!
