Date: Fri, 4 Dec 2015 05:16:09 +0000 From: Oliver Schonrock <oliver@schonrocks.com> To: freebsd-questions@freebsd.org Subject: Re: openssl: verify error:num=20:unable to get local issuer certificate Message-ID: <56612199.2030402@schonrocks.com> In-Reply-To: <565B3495.40005@schonrocks.com> References: <565B2ACD.4030509@schonrocks.com> <565B3495.40005@schonrocks.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --b771VtCpHqfxT1swegXKhnRFBiDKScdTf Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 29/11/15 16:41, Oliver Schonrock wrote: > 2. there is something wrong with the openssl installation on that=20 > 10.1 machine. I have spent nearly a week trying to get to the bottom of this. In the end I installed a clean version of FreeBSD 10.1 to a virtual machine and tested that. Result: exactly the same as my production FreeBSD 10.1 machine. ie openssl refuses to verify that cert, no matter what CAfile and CApath setting I pass to it. So, rather than fight the tide, I swam with it and upgraded my production machine from 10.1 to 10.2 =3D> problem solved. For anyone reading this: openssl certificate chain verification in FreeBSD 10.1 seems to be "broken"..certainly is for me. 10.2 works perfectly. --b771VtCpHqfxT1swegXKhnRFBiDKScdTf Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJWYSGZAAoJEF6SumULDx4Pb80H/2ny5LN38o5kSQgldyfrtiaG zALwlSmlBdhXS/XqlrZ9SeDloN0xs5+t4CaSZJvOOWTrXR/m53nfF+zzrHlASfNl 1zHPeugFPeg8uQnw08OcfWymTZbXiu/xYYqfUueVwjev5VulBpZ0IyGX08nD6ajU xJOF0IbaJ06m0zaYozGiHgcXeV+I0ic0J8IfToy0B4/kkRyiXsboUuwLlNRWJs/n 3r69epDwioswr6jvRTwCoWdeKE3oY5f2faJiEYd5lQWSvALLQkceFRmcv2uDirjY GApG0bT2p//XrmOc2AVnVYHFeRZhuOUac7qzZosz01Ciex1CyybIp4JhevRPmiM= =3V31 -----END PGP SIGNATURE----- --b771VtCpHqfxT1swegXKhnRFBiDKScdTf--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?56612199.2030402>