[openssl-users] Test SSL connection

Walter H. Walter.H at mathemainzel.info
Wed May 30 08:16:47 UTC 2018


On 30.05.2018 08:45, Mark Shnaider via openssl-users wrote:
>
> Hello,
>
> I use  OpenSSL version is openssl-1.1.0h(Windows) and
>
> I run following command from apps directory
>
> |openssl s_server -accept 443 -www|
>
> The server in this case use certificate "server.pem"
>
> On client computer I run command
>
> openssl s_client -connect 10.65.48.108:443
>
> On client computer I  get error :
>
> Verify return code: 21 (unable to verify the first certificate)
>
> What is wrong?
>
> Thanks for any help
>
> Mark
>
very probable, that the client doesn't have the root ca certificate of 
the ca certificate that signed server.pem

you should have at least the following

ca.pem  - the root ca
server.pem - the server ssl/tls certificate

Walter
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180530/7b146d15/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3491 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180530/7b146d15/attachment.bin>


More information about the openssl-users mailing list