> From: owner-openssl-us...@openssl.org On Behalf Of Hazrat Shah
> Sent: Monday, 21 January, 2013 20:08

> With "openssl s_client -connect yourhost:port -CAfile 
> xx.cert" I am getting error 21.
> 
If you are looking at the last but one or two lines displayed, 
that is usually the verify error left over after s_client has 
overridden other errors in its callback. Look near the beginning 
of the output for "depth=n/verify error/verify return" and also 
for the Certificate Chain display to see the cert at each depth.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to