2008/10/1 vinni rathore <[EMAIL PROTECTED]>:
> Hello,
>
> As your problem says that you are getting "local issuer certificate"
> problem that means that client certificate is signed with a particular
> CA certificate and that certificate is not found at the time of
> Handshaking.. so please confirm that your client is also verifying the
> CA certificate loading.

Ah. That makes sense. Unfortunately I've only been provided with the
client certificate and not those used for signing. When I view the
site with IE it appears to be ignoring the client cert chain (when I
view the certificate it shows one of the intermediates as missing) and
presents the client certificate to the server.

Is there a way to avoid checking the chain with s_client? Surely I
just need to be throwing the certificate at the server and it will
decide whether to trust it?

Thanks for the help.

Felix
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to