Re: OpenSSL Certificate issue

2013-01-10 Thread Paul Kraus
On Jan 10, 2013, at 2:06 PM, Greg Larkin wrote: > On 1/10/13 1:38 PM, Paul Kraus wrote: > > I put the certs for my test in /etc/ssl/certs when using the base > system openssl and in /usr/local/openssl/certs when using the openssl > port. > > c_rehash uses a specific openssl binary when invoked li

Re: OpenSSL Certificate issue

2013-01-10 Thread Greg Larkin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/10/13 1:38 PM, Paul Kraus wrote: >> On 1/10/13 12:49 PM, Paul Kraus wrote: >>> On Jan 10, 2013, at 12:38 PM, Greg Larkin wrote: >>> It looks like you don't have the Gmail certificate installed locally, unless I'm mistaken. >>> >>> I d

Re: OpenSSL Certificate issue

2013-01-10 Thread Paul Kraus
> On 1/10/13 12:49 PM, Paul Kraus wrote: >> On Jan 10, 2013, at 12:38 PM, Greg Larkin wrote: >> >>> It looks like you don't have the Gmail certificate installed >>> locally, unless I'm mistaken. >> >> I do not need to have the Google cert installed as long as I have >> the Root Cert that signed i

Re: OpenSSL Certificate issue

2013-01-10 Thread Greg Larkin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/10/13 12:49 PM, Paul Kraus wrote: > On Jan 10, 2013, at 12:38 PM, Greg Larkin wrote: > >> It looks like you don't have the Gmail certificate installed >> locally, unless I'm mistaken. > > I do not need to have the Google cert installed as long a

Re: OpenSSL Certificate issue

2013-01-10 Thread Greg Larkin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/10/13 11:18 AM, Paul Kraus wrote: > I am having an odd issue with OpenSSL and root certs, specifically > fetching email via POP from Google. When I test with "openssl > s_client" and specify the -CAfile I am OK, when I specify the > -CApath (and I

Re: OpenSSL Certificate issue

2013-01-10 Thread Paul Kraus
On Jan 10, 2013, at 12:38 PM, Greg Larkin wrote: > It looks like you don't have the Gmail certificate installed locally, > unless I'm mistaken. I do not need to have the Google cert installed as long as I have the Root Cert that signed it installed, and I do have that cert. The fact that