On Mon, Jun 05, 2006, Jeremiah Foster wrote: > Hello, > > I am building an OpenSSL application to process credit cards. I am > testing the server implementation with the OpenSSL command line tool > like this; > > $ openssl s_client -connect secure.incab.se/verify/server/click:443 > -cert trusted.cer > > The error I receive is; > unable to load client certificate private key file > 9613:error:0906D06C:PEM routines:PEM_read_bio:no start > line:pem_lib.c:644:Expecting: ANY PRIVATE KEY > > I have been unable to find information pertaining to this error message > on the OpenSSL site, and Google is somewhat unhelpful since I am running > linux and a lot of the URLs Google serves up pertain to Microsoft > products. I am guessing there is something wrong with the privat key > file, but I also suspect there may be issues on the server as well. > > Does anyone have a tip? >
If "trusted.cer" is a client certificate you need to include the private key. If it is one or more trusted CAs in PEM format (only PEM will do) then you should use the -CAfile option instead. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
