On Mon, Feb 17, 2014 at 11:35:58AM -0600, [email protected] wrote:
> If I run the following every thing works.
>
> openssl s_client -state -nbio -connect host:9471 \
> -CAfile /etc/ssl/certs/<cert_name>.pem 2>&1
>
> This:
>
> openssl s_client -state -nbio -connect host:9471 \
> -CApath /etc/ssl/certs/ 2>&1
>
> returns rify error:num=19:self signed certificate in certificate chain
# c_rehash /etc/ssl/certs
Note, this is not atomic, and may cause validation failures while
the script is running. On a busy system, you'll need a more robust
mechanism for creating the required soft links.
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
