Actually, I did it wrong. Now I get it. I am able to use the openssl in /user/bin to verify a certificate.
However, if I compile and install another version in /opt/openssl-1.0.2g/bin/openssl, I am not able to get the issuer’s certificate. I think some trusted certificate is store somewhere in Ubuntu 14.04. How can I reference them from my version in /opt/openssl-1.0.2g/bin/openssl? The error is from X509_verify_cert(): error 2 at 1 depth lookup: unable to get issuer certificate Thanks for the information, Anthony. From: openssl-dev [mailto:[email protected]] On Behalf Of CHOW Anthony Sent: Monday, April 18, 2016 6:12 PM To: [email protected] Subject: [openssl-dev] where is PEM_read_bio_X509_AUX() I am trying to do “openssl verify –CAfile server.pem” and the command hang. When I debug, I see that after calling the function PEM_read_bio_X509_AUX in load_cert() it hangs. But I don’t seems to find this function in the OpenSSL tree. Any insight on this? Thanks so much. grep -rwn . -e "PEM_read_bio_X509_AUX" Binary file ./libcrypto.a matches ./util/libeay.num:1541:PEM_read_bio_X509_AUX 1959 EXIST::FUNCTION: Binary file ./demos/easy_tls/test matches Binary file ./libssl.a matches ./crypto/x509/by_file.c:143: x = PEM_read_bio_X509_AUX(in, NULL, NULL, NULL); Binary file ./crypto/x509/by_file.o matches Binary file ./crypto/ts/ts_conf.o matches ./crypto/ts/ts_conf.c:102: x = PEM_read_bio_X509_AUX(cert, NULL, NULL, NULL); Binary file ./crypto/pem/pem_xaux.o matches ./ssl/ssl_rsa.c:705: x = PEM_read_bio_X509_AUX(in, NULL, ctx->default_passwd_callback, Binary file ./ssl/ssl_rsa.o matches ./doc/crypto/pem.pod:20:PEM_read_bio_X509_AUX, PEM_read_X509_AUX, PEM_write_bio_X509_AUX, ./doc/crypto/pem.pod:154: X509 *PEM_read_bio_X509_AUX(BIO *bp, X509 **x, pem_password_cb *cb, void *u); Binary file ./test/rsa_test matches Binary file ./test/ssltest matches Binary file ./test/evp_extra_test matches Binary file ./test/sha512t matches Binary file ./test/ectest matches Binary file ./test/randtest matches Binary file ./test/ecdhtest matches Binary file ./test/evp_test matches Binary file ./test/enginetest matches Binary file ./test/sha256t matches Binary file ./test/dhtest matches Binary file ./test/md4test matches Binary file ./test/md5test matches Binary file ./test/srptest matches Binary file ./test/igetest matches Binary file ./test/sha1test matches Binary file ./test/shatest matches Binary file ./test/rmdtest matches Binary file ./test/mdc2test matches Binary file ./test/verify_extra_test matches Binary file ./test/ecdsatest matches Binary file ./test/bntest matches Binary file ./test/dsatest matches Binary file ./test/exptest matches Binary file ./test/v3nametest matches Binary file ./test/hmactest matches Binary file ./test/clienthellotest matches Binary file ./apps/openssl matches Binary file ./apps/apps.o matches ./apps/apps.c:896: x = PEM_read_bio_X509_AUX(cert, NULL,
-- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
