>
>
> openssl verify -CAfile chain.crt my.cert.crt
>
> IF you have installed some 'common' or 'standard' CAs in your
> system's default truststore -- or if you're using a packaged
> build that does so for you -- turn that off to make sure it
> doesn't silently 'fill in' certs for you, something li
> From: owner-openssl-us...@openssl.org On Behalf Of James Chase
> Sent: Monday, 25 April, 2011 11:02
> I did run the verification, and didn't have an issue there.
> Still am not able to figure out how to correctly create this
> as the only way the p12 compiles is by dropping t
I simplified the issue a bit in order to try and understand what is going on
here and found that the SSL certificate that Network Solutions is providing,
along with the intermediate chain file cannot be verified by newer installs
of Firefox. It doesn't have anything to do with the p12 file I am cre
I did run the verification, and didn't have an issue there. Still am not
able to figure out how to correctly create this as the only way the p12
compiles is by dropping the "-chain" command but that creates ssl
verifications warnings in Firefox web browsers.
openssl req -verify -in www.example.com
