Re: What is 'trusted certificate'

2022-07-16 Thread Viktor Dukhovni
, but without success. Can anyone tell me when > > certificate is "trusted" in this context? (How to get rid this > > warning) or point to documentation/search keys A trusted certificate is a typically self-signed CA certificate stored in a file which is used to hold trusted certificates. -- VIktor.

Re: What is 'trusted certificate'

2022-07-15 Thread David von Oheimb
The below warning message looks a bit like it was produced by OpenSSL, but pretty sure it actually comes from the freeradius server code, which appears to use one of the OpenSSL certificate checking callback mechanisms. So you should ask there what the exact intention for this warning is and how to

What is 'trusted certificate'

2022-07-15 Thread Kamil Jońca
I have freeradius server configured to use EAP-TLS (certificate baset authn) Since some time I have warning in logs: --8<---cut here---start->8--- Fri Jul 15 22:29:04 2022 : Warning: (TLS) untrusted certificate with depth [1] subject name /C=PL/ST=Mazowieckie

Re: [openssl-users] Behaviour of OpenSSL when CApath or CAfile contains a 'trusted certificate' with all uses rejected

2015-01-15 Thread Adam Williamson
On Thu, 2015-01-15 at 04:52 -0800, Adam Williamson wrote: > If anyone can point out what I'm missing I'd be very grateful :) So I think I may actually know more or less what's going on, now. Passing -purpose to `verify` seems to really enable only *purpose* checking. It doesn't actually enable

[openssl-users] Behaviour of OpenSSL when CApath or CAfile contains a 'trusted certificate' with all uses rejected

2015-01-15 Thread Adam Williamson
7;m wrong ;) This is all with OpenSSL 1.0.1k on Fedora Rawhide. Lately I've been trying to figure out if it's possible / desirable to switch to using the OpenSSL 'trusted certificate' format (the one whose PEM-encoded certificates have 'BEGIN TRUSTED CERTIFICATE' rather

line:pem_lib.c:637:Expecting: TRUSTED CERTIFICATE

2007-10-20 Thread Kaj Kandler
Enter pass phrase for ./conficioCA/private/cakey.pem: unable to load certificate 2469:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:637:Expecting: TRUSTED CERTIFICATE - --- Why do I get this error? anything I should do differently? I believe this worked before because I follow my own

RE: how to get the trusted certificate of the website mail.yahoo.com?

2006-11-06 Thread Hu, Yong Jun SNLB PEK
thanks a lot, Gait. You are right!!   --Hu Yongjun From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gait BoxmanSent: Monday, November 06, 2006 3:04 PMTo: openssl-users@openssl.orgSubject: Re: how to get the trusted certificate of the website mail.yahoo.com? Hi, did you try

Re: how to get the trusted certificate of the website mail.yahoo.com?

2006-11-05 Thread Gait Boxman
ng Jun SNLB PEK wrote:  hello, dear all :  1)       I use the command openssl to get the trusted certificate, but there are some errors showing in the output: bash-2.03# /usr/local/ssl/bin/openssl s_client -showcerts -connect login.yahoo.com:443  

how to get the trusted certificate of the website mail.yahoo.com?

2006-11-05 Thread Hu, Yong Jun SNLB PEK
 hello, dear all :  1)       I use the command openssl to get the trusted certificate, but there are some errors showing in the output: bash-2.03# /usr/local/ssl/bin/openssl s_client -showcerts -connect login.yahoo.com:443   CONNECTED(0004)depth=0 /C=US

Re: another person having trouble with Expecting: TRUSTED CERTIFICATE

2004-02-17 Thread Dr. Stephen Henson
tines:PEM_read_bio:no start Benjamin.Kohler> > line:pem_lib.c:632:Expecting: TRUSTED CERTIFICATE > > I am having the same problem. I started by following the instructions > someone posted on: > > www2.goldfisch.at/knowledge/142 > > That person provided a script of &q

another person having trouble with Expecting: TRUSTED CERTIFICATE

2004-02-16 Thread Raymond Rooks
Expecting: TRUSTED CERTIFICATE I am having the same problem. I started by following the instructions someone posted on: www2.goldfisch.at/knowledge/142 That person provided a script of "sign.sh", which I used after generating my own certificates. I used that and had the error as ab

Re: unable to load certificate: Expecting: TRUSTED CERTIFICATE

2004-02-06 Thread Richard Levitte - VMS Whacker
n.Kohler> unable to load certificate Benjamin.Kohler> 22158:error:0906D06C:PEM routines:PEM_read_bio:no start Benjamin.Kohler> line:pem_lib.c:632:Expecting: TRUSTED CERTIFICATE Benjamin.Kohler> Benjamin.Kohler> I don't understand what the problem is, i found nothing in the ml arc

Trusted certificate

2002-03-27 Thread Alexander . Ganishev
Hi, Could you please explain me how to add certificate to trusted certificates and what should I wrote in openssl.conf? Thank you for your time, Alexander Ganishev __ OpenSSL Project http://www.

Re: trusted certificate request and compatibility

2001-07-17 Thread Dr S N Henson
stef wrote: > > Hi, > > is there s.o. who already encounter problems with "trusted" and normal > certificate request with 0.9.6 ? > > is the trusted and untrusted certificates compatible with this version ? > > how create a trusted certificate requ

trusted certificate request and compatibility

2001-07-17 Thread stef
Hi, is there s.o. who already encounter problems with "trusted" and normal certificate request with 0.9.6 ? is the trusted and untrusted certificates compatible with this version ? how create a trusted certificate request in a C code ? how to read a not "trusted" certific

certificate request and trusted certificate request

2001-07-16 Thread stef
Hi' everybody. I'm making a new CA server for tests. I have a problem with reading certificate request : in header file X509_REQ* m_x509Req ; in code file FILE* in=fopen(filename,"r"); if (in == NULL) { return FALSE; } X509_REQ* x = NULL; if (m_x509Re

Trusted Certificate

2000-01-21 Thread Joe Schiavone
How do I make my personal (created with openssl) Netscape Certificate Trusted. It loads into netscape successfully. However, upon clicking the Verify button, the response is that it is NOT Trusted. More INFO: I created my own CA Certificate and my own Netscape certificate, (p12) using the Open

trusted certificate problem

1999-12-12 Thread stone_yang
Hi, I'm making a PKCS12 certificate with open-ssl and import it in my netscape as. But when I try to send a signed mail with my certificate, I encounter a problem message such as: The certificate issuer for this server has been marked as not trusted by the user. NetScape refuses to connect t