Openssl Help
FedoraForum.org - Fedora Support Forums and Community
Results 1 to 3 of 3
  1. #1
    Join Date
    Feb 2006
    Posts
    41

    Unhappy Openssl Help

    Hi All,

    Really hoping you can help me. I am trying to get openssl to verify a certificate.

    I will walk you through what I have done so far.

    1. openssl genrsa -des3 -out connect.mydomain.com.key 2048
    2. openssl req -new -key connect.mydomain.com.key -out connect.mydomain.com.csr
    3. Bought an SSL from GoDaddy.
    4. Submitted my CSR
    5. Downloaded sf_bundle.crt (CA File I presume)
    6. Downloaded connect.mydomain.com.crt

    Now I can do the following:

    [root@server tls]# openssl verify -CAfile sf_bundle.crt connect.mydomain.com.crt
    connect.mydomain.com.crt: OK

    This is specifying the CAfile.

    If I do:

    [root@server tls]# openssl verify connect.mydomain.com.crt
    connect.mydomain.com.crt: /O=connect.mydomain.com/OU=Domain Control Validated/CN=connect.mydomain.com
    error 20 at 0 depth lookup:unable to get local issuer certificate

    So for some reason the CA file is not working. I have no idea where it goes, I have tried moving it around all sorts of directories.

    In a word, I am stuck.

    Anyone any ideas?

  2. #2
    Join Date
    Feb 2006
    Posts
    41

    Re: Openssl Help

    Just giving this a bump..

  3. #3
    unixrobot Guest

    Re: Openssl Help

    error 20 at 0 depth lookup:unable to get local issuer certificate

    means that it can't find the CA that signed connect.mydomain.com.crt , error is mentioned here: http://www.openssl.org/docs/apps/verify.html

    here is small howto which should help you: http://www.herongyang.com/crypto/openssl_verify_2.html

Similar Threads

  1. OpenSSL help
    By jcrapps in forum Security and Privacy
    Replies: 10
    Last Post: 8th April 2009, 06:58 AM
  2. OpenSSL Rc4 Help
    By TypeSH in forum Using Fedora
    Replies: 0
    Last Post: 4th October 2008, 03:08 AM
  3. yum & openssl
    By jstrope in forum Using Fedora
    Replies: 1
    Last Post: 13th February 2008, 05:11 PM
  4. OPENSSL 0.9.7a
    By xstation in forum Servers & Networking
    Replies: 1
    Last Post: 30th January 2006, 03:46 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •