OT: SSL certificate chain problems

Erik Tews erik at debian.franken.de
Wed Jan 24 17:53:15 EST 2007


Am Dienstag, den 23.01.2007, 20:47 -0600 schrieb Travis H.:
>     Verify return code: 21 (unable to verify the first certificate)
> ---
> DONE
> 
> I can't seem to get that certificate chain to have any contents other
> than what you see above, no matter what I do, and hence can't get rid
> of the Verify return code: 21... does anyone have any advice on what
> to do next?  URLs or references to other mailing lists welcome.

Did you try -CAfile, with this command you can give s_client a file with
CAs you trust. If the Thawte Consulting certificate is in this file, you
should have no problems with verifying.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20070124/7b91d6d7/attachment.pgp>


More information about the cryptography mailing list