RE: CA cert issue

2014-02-18 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Viktor Dukhovni > Sent: Monday, February 17, 2014 15:42 > To: openssl-users@openssl.org; owner-openssl-us...@openssl.org (Why owner- ? Dropped.) > On Mon, Feb 17, 2014 at 02:11:39PM -0600, espe...@oreillyauto.com wrote: > > > The applications u

Re: CA cert issue

2014-02-17 Thread espeake
Thanks. Eric Speake Web Systems Administrator O'Reilly Auto Parts (417) 862-2674 Ext. 1975 From: Viktor Dukhovni To: openssl-users@openssl.org, owner-openssl-us...@openssl.org Date: 02/17/2014 02:44 PM Subject: Re: CA cert issue Sent by:owner-openssl-us...@openss

Re: CA cert issue

2014-02-17 Thread Viktor Dukhovni
On Mon, Feb 17, 2014 at 02:11:39PM -0600, espe...@oreillyauto.com wrote: > The applications use data connection pools to connect to the iSeries > servers we use. Allof the connections use hibernate > (.hibernate.connection.url=jdbc:as400://;;; > In the options we add secure=true. This looks li

Re: CA cert issue

2014-02-17 Thread espeake
e: CA cert issue Sent by:owner-openssl-us...@openssl.org On Mon, Feb 17, 2014 at 01:03:59PM -0600, espe...@oreillyauto.com wrote: > I have tried the c_rehash /etc/ssl/certs and that did not help the > situation. I had seen that in a bug post and tried it. > > How can I make

Re: CA cert issue

2014-02-17 Thread Viktor Dukhovni
On Mon, Feb 17, 2014 at 01:03:59PM -0600, espe...@oreillyauto.com wrote: > I have tried the c_rehash /etc/ssl/certs and that did not help the > situation. I had seen that in a bug post and tried it. > > How can I make sure that openssl is using the /etc/ssl/certs folder to > search for the ca ce

Re: CA cert issue

2014-02-17 Thread espeake
Auto Parts (417) 862-2674 Ext. 1975 From: Viktor Dukhovni To: openssl-users@openssl.org Date: 02/17/2014 12:59 PM Subject: Re: CA cert issue Sent by:owner-openssl-us...@openssl.org On Mon, Feb 17, 2014 at 11:35:58AM -0600, espe...@oreillyauto.com wrote: > If I

Re: CA cert issue

2014-02-17 Thread Viktor Dukhovni
On Mon, Feb 17, 2014 at 11:35:58AM -0600, espe...@oreillyauto.com wrote: > If I run the following every thing works. > > openssl s_client -state -nbio -connect host:9471 \ > -CAfile /etc/ssl/certs/.pem 2>&1 > > This: > > openssl s_client -state -nbio -connect host:9471

CA cert issue

2014-02-17 Thread espeake
I have a server that has a certificate that is sign by an internal certificate authority. I have the cert for this CA installed on my application server. If I run the following every thing works. openssl s_client -state -nbio -connect host:9471 -CAfile /etc/ssl/certs/.pem 2>&1 This: openssl s