> I've created a self-signed CA certificate. I use it to sign an other
> certificate. Though the signature seems OK, I've got the following
> message when I try to verify it:
>       
>       error 20 at 0 depth lookup:unable to get local issuer certificate
> 
> I thought I've repected the places and the names of the CAcert files,
> but I may be wrong. Should I edit the ssleay.cnf file or is there a
> place to put these CA files in that could solve the problem?

The CA files are looked up in /usr/local/ssl/certs by default.
To be found the cert needs to be linked to from a hash of the subjects
name. You could create this with

        ln -s selfSignedCert.pem `ssleay x509 -noout -hash -in selfSignedCert.pem`.0

-- 
read you later  -  Holger Reif
------------------------------------ Signaturprojekt Deutsche Einheit
TU Ilmenau - Informatik - Telematik                (Verdamp lang her)
[EMAIL PROTECTED]          Alt wie ein Baum werden, um ueber
Remus.PrakInf.TU-Ilmenau.DE/Reif/    alle 7 Bruecken gehen zu koennen
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+

Reply via email to