Date: Fri, 4 Dec 2015 05:16:09 +0000 From: Oliver Schonrock <oliver@schonrocks.com> To: freebsd-questions@freebsd.org Subject: Re: openssl: verify error:num=20:unable to get local issuer certificate Message-ID: <56612199.2030402@schonrocks.com> In-Reply-To: <565B3495.40005@schonrocks.com> References: <565B2ACD.4030509@schonrocks.com> <565B3495.40005@schonrocks.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On 29/11/15 16:41, Oliver Schonrock wrote: > 2. there is something wrong with the openssl installation on that > 10.1 machine. I have spent nearly a week trying to get to the bottom of this. In the end I installed a clean version of FreeBSD 10.1 to a virtual machine and tested that. Result: exactly the same as my production FreeBSD 10.1 machine. ie openssl refuses to verify that cert, no matter what CAfile and CApath setting I pass to it. So, rather than fight the tide, I swam with it and upgraded my production machine from 10.1 to 10.2 => problem solved. For anyone reading this: openssl certificate chain verification in FreeBSD 10.1 seems to be "broken"..certainly is for me. 10.2 works perfectly. [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJWYSGZAAoJEF6SumULDx4Pb80H/2ny5LN38o5kSQgldyfrtiaG zALwlSmlBdhXS/XqlrZ9SeDloN0xs5+t4CaSZJvOOWTrXR/m53nfF+zzrHlASfNl 1zHPeugFPeg8uQnw08OcfWymTZbXiu/xYYqfUueVwjev5VulBpZ0IyGX08nD6ajU xJOF0IbaJ06m0zaYozGiHgcXeV+I0ic0J8IfToy0B4/kkRyiXsboUuwLlNRWJs/n 3r69epDwioswr6jvRTwCoWdeKE3oY5f2faJiEYd5lQWSvALLQkceFRmcv2uDirjY GApG0bT2p//XrmOc2AVnVYHFeRZhuOUac7qzZosz01Ciex1CyybIp4JhevRPmiM= =3V31 -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?56612199.2030402>