Install Commercial Certificate on Perdition.

Michael Fernández M <[email protected]>
Newsgroups gmane.mail.perdition.user
Message-ID <[email protected]>
Hi.

I'am trying to install a Comodo Cert to perdition and replace the
self-signed certs.....

>From Comodo i have:
- enjoy_comodo_ssl.crt
- commercial.key 
- Entrust Root 
- intermediate certificate (AAA Intermediate)

With "Entrust Root" and "intermediate certificate" I create one file and
that put in: ssl_ca_chain_file

I created that file this way: cat EntrustSecureServerCA.crt
AAACertificateServices_2.crt  > /tmp/ca_bundle.crt


I have modify the following lines:

ssl_cert_file /path/to/enjoy_comodo_ssl.crt

ssl_key_file /path/to/commercial.key

ssl_ca_chain_file  /path/to/ca_bundle.crt

Then i restarted Perdition, and when i run:

openssl  s_client -port 993

depth=0 /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard
verify error:num=20:unable to get local issuer certificate
verify return:1

depth=0 /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard
verify error:num=27:certificate not trusted
verify return:1

depth=0 /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard
verify error:num=21:unable to verify the first certificate
verify return:1

Verify return code: 21 (unable to verify the first certificate)

Why can not verify the cert?, What i am doing wrong?

when i connect with Outlook I got the same error.

Thanks a lot...

Michael.-


______________________________________________
Perdition-users mailing list
[email protected]
http://lists.vergenet.net/listinfo/perdition-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.