Re: [openssl-users] Why can not get certificate chain if certificate expire

2014-12-18 Thread Richard Moore
On 18 December 2014 at 02:08, Jerry OELoo oylje...@gmail.com wrote: Hi Rich: But why browser Chrome can show all certificate path? How did it do? Thanks! Browsers fix up mistakes like this in various ways - Firefox caches intermediates and attempts to fix things by using them if the chain is

[openssl-users] Why can not get certificate chain if certificate expire

2014-12-17 Thread Jerry OELoo
Hi All: I am using openssl api to get website's certificate chain. Now, For normal website, it works fine. Now I encounter a website which certificate is expire, https://soknad.sparebank1.no I use X509_STORE_CTX_get1_chain() to get certificate chain, and from online help

Re: [openssl-users] Why can not get certificate chain if certificate expire

2014-12-17 Thread Richard Moore
On 17 December 2014 at 08:08, Jerry OELoo oylje...@gmail.com wrote: Hi All: I am using openssl api to get website's certificate chain. Now, For normal website, it works fine. Now I encounter a website which certificate is expire, https://soknad.sparebank1.no The server is misconfigured and

Re: [openssl-users] Why can not get certificate chain if certificate expire

2014-12-17 Thread Jerry OELoo
Hi Rich: But why browser Chrome can show all certificate path? How did it do? Thanks! On Wed, Dec 17, 2014 at 5:49 PM, Richard Moore richmoor...@gmail.com wrote: On 17 December 2014 at 08:08, Jerry OELoo oylje...@gmail.com wrote: Hi All: I am using openssl api to get website's certificate