[openssl-users] Test SSL connection

[Mark Shnaider]

Hello Walter,
I did not found  file ca.pem (root certificate) for testing.

Thanks
Mark

From: openssl-users [mailto:openssl-users-bounces at openssl.org] On Behalf Of Walter H.
Sent: Wednesday, May 30, 2018 11:17 AM
To: openssl-users at openssl.org
Subject: Re: [openssl-users] Test SSL connection

On 30.05.2018 08:45, Mark Shnaider via openssl-users wrote:

Hello,

I use  OpenSSL version is openssl-1.1.0h(Windows) and

I run following command from apps directory

openssl s_server -accept 443 -www

The server in this case use certificate "server.pem"

On client computer I run command

openssl s_client -connect 10.65.48.108:443

On client computer I  get error :

Verify return code: 21 (unable to verify the first certificate)

What is wrong?

Thanks for any help

Mark
very probable, that the client doesn't have the root ca certificate of the ca certificate that signed server.pem

you should have at least the following

ca.pem  - the root ca
server.pem - the server ssl/tls certificate

Walter
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180531/a8b3f769/attachment-0001.html>