Dear Group
 I create a certificate from programming But when I
want to verify it openssl verify function say "error
20 at 0 depth lookup:unable to get local issuer
certificate"
What the probelm?
When I create a certificate by openssl comman It can
be verifid.
All ca certificates are in  /usr/local/ssl/certs/ 
directory.
I use the following openssl verification method:
By programming::
openssl verify -verbose -CApath /usr/local/ssl/certs/ 
-purpose any newCert-pem.crt
newCert-pem.crt: /CN=Sarah
Rastkar/C=Iran/[EMAIL PROTECTED]/O=Sharif
Secureware/OU=PKI/CA/ST=Tehran
error 20 at 0 depth lookup:unable to get local issuer
certificate
18612:error:0B086079:x509 certificate
routines:X509_STORE_CTX_purpose_inherit:unknown
purpose id:x509_vfy.c:814:

By openssl:
openssl verify -verbose -CApath /usr/local/ssl/certs/ 
-purpose any testX509.cer
testX509.cer: OK

Thanks.
Bye.





        
                
__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/ 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to