Re: [openssl-users] Why can not get certificate chain if certificate expire

2014-12-18 Thread Richard Moore
On 18 December 2014 at 02:08, Jerry OELoo wrote: > > Hi Rich: > But why browser Chrome can show all certificate path? How did it do? > Thanks! > > Browsers fix up mistakes like this in various ways - Firefox caches intermediates and attempts to fix things by using them if the chain is missing. IE

Re: [openssl-users] Why can not get certificate chain if certificate expire

2014-12-17 Thread Jerry OELoo
Hi Rich: But why browser Chrome can show all certificate path? How did it do? Thanks! On Wed, Dec 17, 2014 at 5:49 PM, Richard Moore wrote: > > > On 17 December 2014 at 08:08, Jerry OELoo wrote: >> >> Hi All: >> I am using openssl api to get website's certificate chain. Now, For >> normal websit

Re: [openssl-users] Why can not get certificate chain if certificate expire

2014-12-17 Thread Richard Moore
On 17 December 2014 at 08:08, Jerry OELoo wrote: > > Hi All: > I am using openssl api to get website's certificate chain. Now, For > normal website, it works fine. > Now I encounter a website which certificate is expire, > https://soknad.sparebank1.no > > The server is misconfigured and is only tr

[openssl-users] Why can not get certificate chain if certificate expire

2014-12-17 Thread Jerry OELoo
Hi All: I am using openssl api to get website's certificate chain. Now, For normal website, it works fine. Now I encounter a website which certificate is expire, https://soknad.sparebank1.no I use X509_STORE_CTX_get1_chain() to get certificate chain, and from online help (https://www.openssl.org/