> From: owner-openssl-us...@openssl.org On Behalf Of Hazrat Shah > Sent: Monday, 21 January, 2013 20:08
> With "openssl s_client -connect yourhost:port -CAfile > xx.cert" I am getting error 21. > If you are looking at the last but one or two lines displayed, that is usually the verify error left over after s_client has overridden other errors in its callback. Look near the beginning of the output for "depth=n/verify error/verify return" and also for the Certificate Chain display to see the cert at each depth. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org