Re: SSLVerifyClient fails

Sven Löschner schrieb:
>>Try using "openssl s_client ...." to connect(? arg for 
>>options). It'll give alot of debug info.
> 
> 
> Okay, I tried "openssl s_client -connect www.test.de:443 -CAfile
> /etc/ssl/UserCA/UserCAchaincert.pem -verify 3 -cert
> /etc/ssl/UserCA/svencert.pem -key /etc/ssl/UserCA/svenkey.pem -reconnect
> -showcerts -state -bugs"
> 
> The output is the following:
> 
> CONNECTED(00000003)
> SSL_connect:before/connect initialization
> SSL_connect:SSLv2/v3 write client hello A
> SSL_connect:SSLv3 read server hello A
> depth=0 /C=DE/ST=NRW/L=Hattingen/O=MX/OU=Demo
> Server/CN=www.test.de/[email protected]
> verify error:num=20:unable to get local issuer certificate

Seems you don't have the required Root-CA-Certificates installed on your
webserver. (you need the root-certificate of your client-certificates)
anyone correct me if I'm wrong.

Paul
-- 
Linux-User #271918 with the Linux Counter, http://counter.li.org/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFC8cr/qErKtBWD7VQRAp0DAKCuMkxcT+xx9f5/+voXL0qvPgNomwCeMRwt
uH0ACRRbnXuUIZ9ebRB/Bmw=
=N1Pk
-----END PGP SIGNATURE-----