Johansen,
Thanks for the quick reply. The output is below.
John
On 04/24/12 11:38 AM, [email protected] wrote:
openssl s_client -CApath /etc/certs/CA -connect 192.168.100.10:4321
depth=0 C = US, ST = California, L = PV, O = Oracle, OU = Solaris
Install, CN =
192.168.100.10
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = US, ST = California, L = PV, O = Oracle, OU = Solaris
Install, CN =
192.168.100.10
verify error:num=27:certificate not trusted
verify return:1
depth=0 C = US, ST = California, L = PV, O = Oracle, OU = Solaris
Install, CN =
192.168.100.10
verify error:num=21:unable to verify the first certificate
verify return:1
CONNECTED(00000004)
---
Certificate chain
0 s:/C=US/ST=California/L=PV/O=Oracle/OU=Solaris Install/CN=192.168.100.10
i:/C=US/ST=California/L=PV/O=Oracle/OU=Solaris Install/CN=CA
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=PV/O=Oracle/OU=Solaris
Install/CN=192.168.100.10
issuer=/C=US/ST=California/L=PV/O=Oracle/OU=Solaris Install/CN=CA
---
No client certificate CA names sent
---
SSL handshake has read 906 bytes and written 304 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 1024 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : AES256-SHA
Session-ID:
BC6491EC76A7226FDDA0289BF5EE39C9D0E76CD2980010E94E3FEB93ED8A1BA4
Session-ID-ctx:
Master-Key:
4E68F97D878CAA8E8180B88C8A7AB9A6C17DE6344E7B3C626EB3C166B4FCE33B
BAA360B4E9C44307D2A0C51ED9E2E54C
Key-Arg : None
PSK identity: None
PSK identity hint: None
TLS session ticket:
0000 - f5 3e a7 e4 49 f2 d7 f6-8c 0e 53 7a b3 2f 3b a8
.>..I.....Sz./;.
0010 - b1 6f bd b8 fc 30 00 95-d2 de 4f e0 37 5e 3b 0a
.o...0....O.7^;.
0020 - d2 9f 8c 4f 47 61 ba 8a-bd 30 ae d0 ab f5 a6 40
...OGa...0.....@
0030 - 98 30 b2 97 9b aa 21 ee-24 00 44 78 6b 91 88 c2
.0....!.$.Dxk...
0040 - 67 fe 10 d9 a1 f3 f9 d5-fe 50 3d 50 2d 47 af bd
g........P=P-G..
0050 - 27 86 02 71 2f 2c 47 0e-a7 af d4 a5 c2 a1 1c 44
'..q/,G........D
0060 - eb 43 1b 27 cb b3 e1 dc-8c b5 d9 30 c4 60 19 03
.C.'.......0.`..
0070 - 2a 45 a7 08 78 54 1c d7-5f a0 71 ea e9 8c 74 e4
*E..xT.._.q...t.
0080 - d2 2e b7 33 f9 f4 85 d5-1e 36 be c8 fd fb ca 43
...3.....6.....C
0090 - a4 71 29 37 b6 7e b1 2c-15 61 9f 3f df 93 80 a3
.q)7.~.,.a.?....
Start Time: 1335268228
Timeout : 300 (sec)
Verify return code: 21 (unable to verify the first certificate)
---
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss