Eventhough the openssl complains for the
certificate, it doesnt seem to to mean
much. Because i tried the same certificate on
my Unix installation(same setup:apache/modssl/bsafe)
it worked very fine. And still the openssl
tool on unix complained. probably the error
shown by the tool is not related to the
problem i am seeing.

The fact that the dummy certs work fine
but not verisign certs should give some lead to
which component the problem could lie in. 
(could it be in mod_ssl/openssl/bsafe patch?)

Any guesses?
thanks
vijay

--- vijay karthik <[EMAIL PROTECTED]> wrote:
> 
> Hi !
> 
> The apache server is working with the
> dummy certs but not the verisign cert.
> 
> I ran the command,
> openssl verify <mycertificatename>
> 
> i got the following error
> verisign.crt:
>
/C=US/ST=california/L=location/O=xyzInc/OU=test/CN=Mypc
> .xyz.com
> error 20 at 0 depth lookup:unable to get local
> issuer
> certificate
> 
> I dont have any trust points installed on my apache
> server(which i hope is not needed)
> 
> Any idea on what the problem could be ?
> 
> thanks
> Vijay
> --- vijay karthik <[EMAIL PROTECTED]> wrote:
> > 
> > The httpd.conf was taken from unix and
> > <Ifdefine SSL> was failing hence the
> > modules were not getting loaded.
> > I removed the IfDefine from httpd.conf.
> > (thats the reason we give -DSSL in commandline
> > to start httpd on Unix ?)
> 
> __________________________________________________
> Do You Yahoo!?
> Talk to your friends online with Yahoo! Messenger.
> http://im.yahoo.com
>
______________________________________________________________________
> OpenSSL Project                                
> http://www.openssl.org
> Development Mailing List                      
> [EMAIL PROTECTED]
> Automated List Manager                          
> [EMAIL PROTECTED]
> 
__________________________________________________
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to