Re: Certificate error FIXED

2006-05-29 Thread Lawrence Rose
Thanks Ted, Suresh, and Marek for your help!  I'm back on the merry-go-round again. -- larry Lawrence L. Rose 190 Park Avenue Daytona Development Florham Park, NJ 07932 AT&T Labs - Research

Re: Certificate error

2006-05-29 Thread Marek Marcola
Hello, > $ openssl s_client -cert solar_client.pem -CAfile private/root.pem > Enter pass phrase for solar_client.pem: > CONNECTED(0003) > depth=0 /C=US/ST=NJ/L=Florham Park/O=AT&T > Research/CN=solarium.research.att.com > verify error:num=20:unable to get local issuer certificate > verify retu

Re: Certificate error

2006-05-29 Thread Lawrence Rose
Ted: Thanks for the s_server/s_client suggestion.  Here is the complete output.  The server appears to be ok but not the client???  $ openssl x509 -subject -issuer -dates -noout -in client.pem subject= /C=US/ST=NJ/L=Florham Park/O=AT&T Labs - Research/CN=solarium.research.att.com issuer= /C=

Re: Certificate error

2006-05-29 Thread Suresh
Hi, are you sure that you have replaced the new root.pem on the client side, and put new server CERTIFICATE and new PRIVATE KEY pair on the server side? - Suresh On Sun, 28 May 2006 22:21:22 -0400 Lawrence Rose <[EMAIL PROTECTED]> wrote: > Hi: > > I setup the four openSSL examples in Viega et

Re: Certificate error

2006-05-29 Thread Bernhard Froehlich
Lawrence Rose wrote: Hi: I setup the four openSSL examples in Viega et al with certs and ran fine until the 30 day certs expired. Now after I cut a new root.pem and sereverCA.pem I cannot pass certificate verification. Where have I gone wrong? I've tried everything these past several days