On Thu, Apr 28, 2005, John Hoel wrote:

> I have been doing that all along. That's what is so exasperating - following 
> insructions doesn't seem to help. (arghh! head banging). That's the 2nd 
> function argument. 3rd argument is NULL (not using CAdir).
> 
> The file passed to SSL_CTX_use_certificate_chain_file() is client.pem. 
> 
> BTW - I tried testing with s_client and got the following error (self signed 
> certificate):
> 
[snip]

Well one problem is that the issuer name and subject names of your server
certificate are identical. That's taken to be a "self signed certificate" well
at least for V1 certificates.

Make sure you don't give the same field values in the server certificate and
the root CA.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to