Dear Group I create a certificate from programming But when I want to verify it openssl verify function say "error 20 at 0 depth lookup:unable to get local issuer certificate" What the probelm? When I create a certificate by openssl comman It can be verifid. All ca certificates are in /usr/local/ssl/certs/ directory. I use the following openssl verification method: By programming:: openssl verify -verbose -CApath /usr/local/ssl/certs/ -purpose any newCert-pem.crt newCert-pem.crt: /CN=Sarah Rastkar/C=Iran/[EMAIL PROTECTED]/O=Sharif Secureware/OU=PKI/CA/ST=Tehran error 20 at 0 depth lookup:unable to get local issuer certificate 18612:error:0B086079:x509 certificate routines:X509_STORE_CTX_purpose_inherit:unknown purpose id:x509_vfy.c:814:
By openssl: openssl verify -verbose -CApath /usr/local/ssl/certs/ -purpose any testX509.cer testX509.cer: OK Thanks. Bye. __________________________________ Do you Yahoo!? Friends. Fun. Try the all-new Yahoo! Messenger. http://messenger.yahoo.com/ ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]