Re: " unable to get local issuer certificate" & certificate not trusted errors

2009-07-09 Thread Duncan Berriman
Its likely that the certificate is not installed correctly and that the person who installed it did not install the intermediate CA which comes with it. This isn't always obvious and doesn't usually cause a problem unless it is the first site the visitor has visited that uses that interme

RE: unable to get local issuer certificate

2009-04-22 Thread Duncan Berriman
> How about serialnumber? Is it possible that the server is clustered > as you hypothesized, and different instances have different certs -- > both/all for the same subject=server (as would make sense), > but one of them > invalid? Serial number is the same. > I don't think there's any easy w

Re: unable to get local issuer certificate

2009-04-21 Thread Duncan Berriman
To be clear, your program is the client (on 'production server') connecting to the 'web server'? Also to be sure, you're using software OpenSSL in your program, not one of the hardware 'engines'? yes I have reproduced this with openssl s_client SSL_get_verify_result is returning "unable to

unable to get local issuer certificate

2009-04-21 Thread Duncan Berriman
Hi, I'm doing final testing of some code on a production server and I have one website/SSL certificate that is randomly failing when I try to verify the certificate. Some times it works, some times it doesn't, try it again a short while later and its fine. I don't know the technology on the web s

RE: no ciphers issue

2007-11-26 Thread Duncan Berriman
Try OpenSSL_add_all_algorithms(); SSL_load_error_strings(); SSL_library_init(); I seem to remember somewhere in the past having to add the SSL_library_init(); after one upgrade of Fedora when previously it happened implicitly. Duncan > -Original Message- > From:

RE: Weird problem with OpenSSL 0.9.8 requires SSLv2

2007-11-23 Thread Duncan Berriman
Also reproduced on FC8 on a fresh install. I've posted a question to the fedora list so we will see what happens. This only happens when connected to one particular server (that I have found) and only from FC6 onwards. Duncan > -Original Message- > From: Duncan Berriman [ma

RE: Weird problem with OpenSSL 0.9.8 requires SSLv2

2007-11-23 Thread Duncan Berriman
23 November 2007 06:29 > To: openssl-users@openssl.org > Subject: Re: Weird problem with OpenSSL 0.9.8 requires SSLv2 > > > On Thu, Nov 22, 2007 at 09:33:44PM -, Duncan Berriman wrote: > > > I was investigating a problem today and the results are a > little weird.

Weird problem with OpenSSL 0.9.8 requires SSLv2

2007-11-22 Thread Duncan Berriman
Hi, First time I've posted here so please excuse me if I get it wrong. I was investigating a problem today and the results are a little weird. It appears to be a bug/feature of the release I am using (openssl-0.9.8b-8.3.fc6). Previously if I used ssl to connect to particular site and negotiate