OpenSSL Certificate issue
Greg Larkin
glarkin at FreeBSD.org
Thu Jan 10 18:29:21 UTC 2013
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 1/10/13 12:49 PM, Paul Kraus wrote:
> On Jan 10, 2013, at 12:38 PM, Greg Larkin wrote:
>
>> It looks like you don't have the Gmail certificate installed
>> locally, unless I'm mistaken.
>
> I do not need to have the Google cert installed as long as I have
> the Root Cert that signed it installed, and I do have that cert.
> The fact that I can point to the certificate file itself and the
> test connection works fine shows that I have the correct cert file.
> I agree that it is probably NOT installed correctly, but ...
>
>> Check the instructions here, and let us know if that fixes the
>> problem for you:
>> http://squeezesetup.wordpress.com/install-mail-part-2-gmail-certs/
>
>>
> these instructions appear to be for Linux and not FreeBSD and there
> are configuration and path differences, which is probably the core
> of my problem. I expect that I have not installed the root certs
> into the correct directory (but they are in the directory that
> c_rehash is working in).
>
>
My guess is that you're using the c_rehash supplied with OpenSSL 1.x
(installed as a port?) to hash the certs and then the OpenSSL 0.9.x
binary from the base system to connect to the Gmail POP server.
Give your s_client command another try with the fully specified path
to the OpenSSL 1.x binary to see if that corrects the verification error.
Regards,
Greg
- --
Greg Larkin
http://www.FreeBSD.org/ - The Power To Serve
http://www.sourcehosting.net/ - Ready. Set. Code.
http://twitter.com/cpucycle/ - Follow you, follow me
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (Darwin)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
iEYEARECAAYFAlDvCHoACgkQ0sRouByUApDYkQCdEe9DcykLkyzww+0K+UDRqIdC
xY8AoMuUMC1xmD2RlaiAQJpya8y/QQp7
=8zRm
-----END PGP SIGNATURE-----
More information about the freebsd-questions
mailing list