Re: Using OpenSSL to verify certificate chains

2007-03-14 Thread Tim Traver
Olaf Gellert wrote: Tim Traver wrote: openssl verify -purpose sslserver cert.crt where cert.crt is the cert and its CAcert and the root cert in pem format...this is done on the command line, and it always gives me this error : error 20 at 0 depth lookup:unable to get local issuer certifica

Re: Using OpenSSL to verify certificate chains

2007-03-13 Thread Olaf Gellert
Tim Traver wrote: > openssl verify -purpose sslserver cert.crt > > where cert.crt is the cert and its CAcert and the root cert in pem > format...this is done on the command line, and it always gives me this > error : > > error 20 at 0 depth lookup:unable to get local issuer certificate > > and

Using OpenSSL to verify certificate chains

2007-03-13 Thread Tim Traver
Hi all, ok, I've stared at the manuals for a while, and tried to test things, but I think I'm at a point where I need some help. Let me first start with my goal. I run many systems running Apache with mod_ssl, and have built an interface to automatically install certificates on domains as needed