Arun G Nair wrote: > Hi all, > I get this error when trying to connect to my SSL enabled site with > openssl's s_client. > > "verify error:num=20:unable to get local issuer certificate" > > I have purchased a CRT signed by AddTrust External Root CA through Comodo. > ------------------------------------------------------------------------------------------------------------------ > > debian:/etc/apache# /usr/bin/openssl s_client -connect localhost:443 -cert > ./ssl.crt/server.crt -key ./ssl.key/server.pem
You miss the -CAfile parameter, which points to a file with the public keys of the CA's you want to trust. Joost --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
