Re: verbosity of `openssl ca` error

2019-12-06 Thread Erich Eckner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, I found the cause of my issue: When creating a new intermediate ca, I did not purge the old directory, thus starting with an serial>01 and issued certificates, revocation list which does not match the new private key. Still my wish remains:

verbosity of `openssl ca` error

2019-12-04 Thread Erich Eckner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, I'm trying to sign a csr by running `CA=signing-ca openssl ca -verbose -config /etc/simple-pki/ca-ssl.conf -name signing_ca -in /tmp/tmp.Qz3EoKa0S4/fileserver-lo.ddns.eckner.net.csr -out /tmp/tmp.Qz3EoKa0S4/fileserver-lo.ddns.eckner.net.crt -

Re: Unknown CA error

2012-04-24 Thread Appaji Yelamarthi
ote: >> Hi there, >> I'm facing 'Unkown CA' error during ssl handshake messages between >> client(a network device) and server (pound). >> sorry am not much familiar with openssl library usage but setting up >> the pound reverse proxy which use openssl

Re: Unknown CA error

2012-04-18 Thread Jakob Bohm
On 4/18/2012 8:47 PM, Appaji Yelamarthi wrote: Hi there, I'm facing 'Unkown CA' error during ssl handshake messages between client(a network device) and server (pound). sorry am not much familiar with openssl library usage but setting up the pound reverse proxy which use openssl

Unknown CA error

2012-04-18 Thread Appaji Yelamarthi
Hi there, I'm facing 'Unkown CA' error during ssl handshake messages between client(a network device) and server (pound). sorry am not much familiar with openssl library usage but setting up the pound reverse proxy which use openssl 0.9.8 on redhat linux. Done a lot of googli

Client-side authentication: unknown CA error

2011-03-11 Thread Amar Patel
I am trying to run the following command: [root@localhost certs]# openssl s_client -connect localhost:7043 -cert /opt/openssl-1.0.0a/ssl/ certwork_client/client.crt -key /opt/openssl-1.0.0a/ssl/certwork_client/client.key -CAfile /opt/openssl-1.0.0a/ssl/certwork/ca.crt -showcerts -state -verify 2 v

Re: Can I reuse a socket connection after SSL connect failed with Unknown CA error

2009-06-08 Thread Satish Chandra Kilaru
server and opens a socket and calls >> SSL_Connect(). Server sends his certificate. Client notices that >> server has a older CA and returns UNKNOWN CA error. >> >> At this point can we reuse the socket by cleaning up the old SSL >> connection and

Re: Can I reuse a socket connection after SSL connect failed with Unknown CA error

2009-06-08 Thread Kyle Hamilton
g to connect to server and opens a socket and calls > SSL_Connect(). Server sends his certificate. Client notices that > server has a older CA and returns UNKNOWN CA error. > > At this point can we reuse the socket by cleaning up the ol

Can I reuse a socket connection after SSL connect failed with Unknown CA error

2009-06-08 Thread Satish Chandra Kilaru
to server and opens a socket and calls SSL_Connect(). Server sends his certificate. Client notices that server has a older CA and returns UNKNOWN CA error. At this point can we reuse the socket by cleaning up the old SSL connection and recreating a new one? --Satish

Re: unknown CA error

2004-08-05 Thread nathv
Hello Dr.Stephen, The cmd switches I am using are OpenSSL> s_client -connect :443 -state -cert leafcert.pem -key privkey.pem -CAfile nyisobag.pem Loading 'screen' into random state - done Enter PEM pass phrase: 840:error:0906D066:PEM routines:PEM_read_bio:bad end line:.\crypto\pem\pem_lib.c :736

Re: unknown CA error

2004-08-04 Thread Dr. Stephen Henson
On Tue, Aug 03, 2004, nathv wrote: > Hello All, > > I am trying to access a server using s_client and I am > passing the leaf and self signed CA of the server > through -CAfile switch, but I am still getting the > error below, any ideas?. > > . > SSL_connect:SSLv3 write certificate verify A

Re: CA error

2002-04-25 Thread Lutz Jaenicke
On Wed, Apr 24, 2002 at 04:18:49PM -0300, Jay States wrote: > I am use learning and testing CA's. I have tried to create a > self-signed CA certificate using the following: > > openssl req -new -x509 -days 365 -key sample.key -out sample.crt > > and this is the error message that I get. I re-b

CA error

2002-04-25 Thread Jay States
I am use learning and testing CA's. I have tried to create a self-signed CA certificate using the following: openssl req -new -x509 -days 365 -key sample.key -out sample.crt and this is the error message that I get. I re-built openssl and openssh, but I still get this error. What am I doing