Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #167482

Re: Openssl -showcerts "verify error"

Show key headers only | View raw

	Hi.

On Wed, 04 May 2016 17:25:40 +0100
Ron Leach <ronleach@tesco.net> wrote:

> List, good afternoon,
> 
> I'd appreciate some advice about how to fix an SSL error I'm hitting 
> while accessing a government website required for online filing. 
> Oddly, this error has just occurred, but we've been using the service 
> without difficulty for a few years.
> 
> The SSL failure is reported by the application as an
> "SSL Certificate Verification Error"; no other information.

Considering that https://secure.gateway.gov.uk tells me about
*selecting* a valid certificate - it could mean that your *client*
became expired recently.


> Using openssl -showcerts, a "verify error" is reported.  Here's the 
> dialogue - I've skipped the bulk of the certificate texts.
> 
> ron@debians5:~$ openssl s_client -showcerts -connect 
> secure.gateway.gov.uk:443 </dev/null

You'll always get errno 20 that way as openssl does not use any
Certified Authority information unless told to do so.

Try this:

openssl s_client -showcerts -connect secure.gateway.gov.uk:443 \
-CApath /etc/ssl/certs </dev/null

Reco

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Openssl -showcerts "verify error" Ron Leach <ronleach@tesco.net> - 2016-05-04 18:30 +0200
  Re: Openssl -showcerts "verify error" "William O'Malley" <omalleyw@fastmail.net> - 2016-05-04 19:50 +0200
    Re: Openssl -showcerts "verify error" Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-04 20:00 +0200
      Re: Openssl -showcerts "verify error" "William O'Malley" <omalleyw@fastmail.net> - 2016-05-04 20:10 +0200
  Re: Openssl -showcerts "verify error" Reco <recoverym4n@gmail.com> - 2016-05-05 00:30 +0200
    Re: Openssl -showcerts "verify error" Ron Leach <ronleach@tesco.net> - 2016-05-05 01:00 +0200
      Re: Openssl -showcerts "verify error" Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-05 01:20 +0200
        Re: Openssl -showcerts "verify error" Ron Leach <ronleach@tesco.net> - 2016-05-05 09:10 +0200
          Re: Openssl -showcerts "verify error" Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-05 10:10 +0200
      Re: Openssl -showcerts "verify error" Reco <recoverym4n@gmail.com> - 2016-05-05 11:20 +0200

csiph-web