verify error:num=20:unable to get local issuer certificate - Apache

This is a discussion on verify error:num=20:unable to get local issuer certificate - Apache ; Hi all, I get this error when trying to connect to my SSL enabled site with openssl's s_client. "verify error:num=20:unable to get local issuer certificate" I have purchased a CRT signed by AddTrust External Root CA through Comodo. ------------------------------------------------------------------------------------------------------------------ debian:/etc/apache# ...

+ Reply to Thread
Results 1 to 2 of 2

verify error:num=20:unable to get local issuer certificate

  1. Default verify error:num=20:unable to get local issuer certificate

    Hi all,
    I get this error when trying to connect to my SSL enabled site with
    openssl's s_client.

    "verify error:num=20:unable to get local issuer certificate"

    I have purchased a CRT signed by AddTrust External Root CA through Comodo.
    ------------------------------------------------------------------------------------------------------------------

    debian:/etc/apache# /usr/bin/openssl s_client -connect localhost:443 -cert
    ../ssl.crt/server.crt -key
    ../ssl.key/server.pem
    CONNECTED(00000003)
    depth=1 /C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
    External CA Root
    verify error:num=20:unable to get local issuer certificate
    verify return:0
    ---
    Certificate chain
    0 s:/C=US/2.5.4.17=22655/ST=Virginia/L=Stephens City/2.5.4.9=Stephens
    City/2.5.4.9=5395 Main Street/O=My Company Inc/OU=Sales/OU=InstantSSL/CN=
    www.myco.com
    i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
    External CA Root
    1 s:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
    External CA Root
    i:/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=
    http://www.usertrust.com/CN=UTN

    ....[snip]...

    --------------------------------------------------------------------------------------------------------------------

    Waiting for your replies..

    Regards,
    Arun


  2. Default Re: verify error:num=20:unable to get local issuer certificate

    Arun G Nair wrote:
    > Hi all,
    > I get this error when trying to connect to my SSL enabled site with
    > openssl's s_client.
    >
    > "verify error:num=20:unable to get local issuer certificate"
    >
    > I have purchased a CRT signed by AddTrust External Root CA through Comodo.
    > ------------------------------------------------------------------------------------------------------------------
    >
    > debian:/etc/apache# /usr/bin/openssl s_client -connect localhost:443 -cert
    > ./ssl.crt/server.crt -key ./ssl.key/server.pem


    You miss the -CAfile parameter, which points to a file with the public
    keys of the CA's you want to trust.

    Joost



    ---------------------------------------------------------------------
    The official User-To-User support forum of the Apache HTTP Server Project.
    See <URL:http://httpd.apache.org/userslist.html> for more info.
    To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
    " from the digest: users-digest-unsubscribe@httpd.apache.org
    For additional commands, e-mail: users-help@httpd.apache.org



+ Reply to Thread