RE: Openssl server certificates validation error

2013-01-22 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Hazrat Shah > Sent: Monday, 21 January, 2013 20:08 > With "openssl s_client -connect yourhost:port -CAfile > xx.cert" I am getting error 21. > If you are looking at the last but one or two lines displayed, that is usually the verify error lef

RE: Openssl server certificates validation error

2013-01-21 Thread Hazrat Shah
rg Subject: RE: Openssl server certificates validation error > From: owner-openssl-us...@openssl.org On Behalf Of Hazrat Shah > Sent: Friday, 18 January, 2013 20:02 > Pls, see my comments below. > > -Original Message- > From: owner-openssl-us...@openssl.org On Behalf Of

RE: Openssl server certificates validation error

2013-01-21 Thread Dave Thompson
M > To: openssl-users@openssl.org > Subject: RE: Openssl server certificates validation error > > >From: owner-openssl-us...@openssl.org On Behalf Of Hazrat Shah > >Sent: Friday, 18 January, 2013 17:54 > > >I am having problem with server certificate verification t

RE: Openssl server certificates validation error

2013-01-18 Thread Hazrat Shah
Pls, see below. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dave Thompson Sent: Friday, January 18, 2013 8:11 PM To: openssl-users@openssl.org Subject: RE: Openssl server certificates validation error >From: ow

RE: Openssl server certificates validation error

2013-01-18 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Hazrat Shah >Sent: Friday, 18 January, 2013 17:54 Additional to previous sent prematurely: >On OpenSSL startup, the file is read from window certifcate store >and saved into the X509 certificate store. >1) File is read from window certifi

RE: Openssl server certificates validation error

2013-01-18 Thread Hazrat Shah
Pls, see my comments below. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dave Thompson Sent: Friday, January 18, 2013 7:55 PM To: openssl-users@openssl.org Subject: RE: Openssl server certificates validation error >F

RE: Openssl server certificates validation error

2013-01-18 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Hazrat Shah >Sent: Friday, 18 January, 2013 17:54 >I am having problem with server certificate verification >the SSL_get_verify_result() returns Error code 20. >I add a (xx.cert) file to the window certificate store as follow. >On OpenSSL sta

RE: Openssl server certificates validation error

2013-01-18 Thread Hazrat Shah
ng the verify "X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY" error. Thanks -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jeffrey Walton Sent: Friday, January 18, 2013 6:20 PM To: openssl-users@openssl.org Subject: Re: Open

Re: Openssl server certificates validation error

2013-01-18 Thread Jeffrey Walton
On Fri, Jan 18, 2013 at 5:53 PM, Hazrat Shah wrote: > > I am having problem with server certificate verification the > SSL_get_verify_result() returns > > Error code 20. >From http://www.openssl.org/docs/apps/verify.html, that is X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY. > I add a (xx.cert) f

Openssl server certificates validation error

2013-01-18 Thread Hazrat Shah
Hi, I am having problem with server certificate verification the SSL_get_verify_result() returns Error code 20. I add a (xx.cert) file to the window certificate store as follow. 1) The file supported encoding types are X509_ASN_ENCODING and PKCS_7_ASN_ENCODING The file is converted from bas