On Thu, Apr 28, 2005, John Hoel wrote: > I have been doing that all along. That's what is so exasperating - following > insructions doesn't seem to help. (arghh! head banging). That's the 2nd > function argument. 3rd argument is NULL (not using CAdir). > > The file passed to SSL_CTX_use_certificate_chain_file() is client.pem. > > BTW - I tried testing with s_client and got the following error (self signed > certificate): > [snip]
Well one problem is that the issuer name and subject names of your server certificate are identical. That's taken to be a "self signed certificate" well at least for V1 certificates. Make sure you don't give the same field values in the server certificate and the root CA. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]