Arun G Nair wrote: > Hi all, > I get this error when trying to connect to my SSL enabled site with > openssl's s_client. > > "verify error:num=20:unable to get local issuer certificate" > > I have purchased a CRT signed by AddTrust External Root CA through Comodo. > ------------------------------------------------------------------------------------------------------------------ > > debian:/etc/apache# /usr/bin/openssl s_client -connect localhost:443 -cert > ./ssl.crt/server.crt -key ./ssl.key/server.pem You miss the -CAfile parameter, which points to a file with the public keys of the CA's you want to trust. Joost --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|