IMO the public-key of the signer of the server certificate CN=www.ws-onramp1.wholesale.bt.com should be in the CAfile (c:\curl\ca\ca.pem)
-HTH _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Karia Ravi Sent: Wednesday, June 11, 2008 5:23 AM To: openssl-users@openssl.org Subject: SSL Problem Hello, I hope you can help me. I have been looking on the Internet and testing for a week now and have not had much luck. I am currently trying to automate a few manual activities within our organisation and I am trying to connect to our supplier to submit XML to them. Please see below, openssl s_client -connect www.ws-onramp1.wholesale.bt.com:5443/XmldiagWsTransport -cert C:\curl\new_private_050608.pem -CAfile c:\curl\ca\ca.pem CONNECTED(00000784) depth=1 /O=BT Group Plc/CN=Northside verify return:1 depth=0 /C=GB/ST=England/L=London/O=BT Wholesale/OU=BTW/CN=www.ws-onramp1.wholesale.bt.com/emailAddress=gopiramesh. [EMAIL PROTECTED] verify return:1 3052:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1052:SSL alert number 46 3052:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:226: Kind Regards Ravi Karia, Infrastructure Services Networks FUJITSU * Fujitsu Services, Infinity House, Mallard Way, Crewe Business Park, CW1 6ZQ * +44 (0) 7867829174 * E-mail: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] " Web: <http://uk.fujitsu.com/> http://uk.fujitsu.com Fujitsu Services Limited, Registered in England no 96056, Registered Office 22 Baker Street, London, W1U 3BW This e-mail is only for the use of its intended recipient. Its contents are subject to a duty of confidence and may be privileged. Fujitsu Services does not guarantee that this e-mail has not been intercepted and amended or that it is virus-free. P Please consider the environment - do you really need to print this email?
