Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 4 Dec 2015 05:16:09 +0000
From:      Oliver Schonrock <oliver@schonrocks.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: openssl: verify error:num=20:unable to get local issuer certificate
Message-ID:  <56612199.2030402@schonrocks.com>
In-Reply-To: <565B3495.40005@schonrocks.com>
References:  <565B2ACD.4030509@schonrocks.com> <565B3495.40005@schonrocks.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--b771VtCpHqfxT1swegXKhnRFBiDKScdTf
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 29/11/15 16:41, Oliver Schonrock wrote:
> 2. there is something wrong with the openssl installation on that=20
> 10.1 machine.

I have spent nearly a week trying to get to the bottom of this. In the
end I installed a clean version of FreeBSD 10.1 to a virtual machine and
tested that. Result: exactly the same as my production FreeBSD 10.1
machine. ie openssl refuses to verify that cert, no matter what CAfile
and CApath setting I pass to it.

So, rather than fight the tide, I swam with it and upgraded my
production machine from 10.1 to 10.2 =3D> problem solved.

For anyone reading this: openssl certificate chain verification in
FreeBSD 10.1 seems to be "broken"..certainly is for me.

10.2 works perfectly.





--b771VtCpHqfxT1swegXKhnRFBiDKScdTf
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJWYSGZAAoJEF6SumULDx4Pb80H/2ny5LN38o5kSQgldyfrtiaG
zALwlSmlBdhXS/XqlrZ9SeDloN0xs5+t4CaSZJvOOWTrXR/m53nfF+zzrHlASfNl
1zHPeugFPeg8uQnw08OcfWymTZbXiu/xYYqfUueVwjev5VulBpZ0IyGX08nD6ajU
xJOF0IbaJ06m0zaYozGiHgcXeV+I0ic0J8IfToy0B4/kkRyiXsboUuwLlNRWJs/n
3r69epDwioswr6jvRTwCoWdeKE3oY5f2faJiEYd5lQWSvALLQkceFRmcv2uDirjY
GApG0bT2p//XrmOc2AVnVYHFeRZhuOUac7qzZosz01Ciex1CyybIp4JhevRPmiM=
=3V31
-----END PGP SIGNATURE-----

--b771VtCpHqfxT1swegXKhnRFBiDKScdTf--



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?56612199.2030402>