On Mon, Apr 27, 2009, loubot wrote: > > http://www.nabble.com/file/p23269594/CA_AAA.pem CA_AAA.pem > http://www.nabble.com/file/p23269594/Test.pem Test.pem > http://www.nabble.com/file/p23269594/Test_CA_AAA.pem Test_CA_AAA.pem > http://www.nabble.com/file/p23269594/AAACertificateServices.pem > AAACertificateServices.pem > I attach the two certificate???s files. CA_AAA.pem is the package of the many > root/sub ca certificate. AAACertificateServices.pem is the server > certificate which is verified with CA_AAA.pem. I use the command which is > ???openssl verify ???CAfile CA_AAA.pem AAACertificateServices.pem???. In > Windows/Linux platform, the verify command can be valid. In MAC OS platform, > it can???t be valid. > > It always show ???errcode = 20 : unable get the local issuer certificate???. > But, I move the some certificates??? position or delete some certificates from > CA_AAA.pem, then I generate the two CA certificate files (Test_CA_AAA.pem > and Test.pem). I try the CA certificates files with verify command. (openssl > verify ???CAfile Test_CA_AAA.pem/Test.pem AAACertificateServices.pem can > verify ok). > > Because I can???t know that detail problem???s functions, I can assign what > function is fail. > > I use the openssl 0.9.8i. >
Try 0.9.8k, some fixes have been applied to this area. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
