<div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif"><span style="font-family:arial,sans-serif;font-size:12.8px">I am a novice in terms of ssl and hence have limited knowledge in this.</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">Please help</span><br style="font-family:arial,sans-serif;font-size:12.8px"><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">I have been a given a jks file that has server certificate, client</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">certificate and a key for the client certificate.  I need to convert it to</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">pem to use it in my application.</span><br style="font-family:arial,sans-serif;font-size:12.8px"><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">I have converted a jks file to p12 and then to pem.</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">However when i try to verify i get the following error.</span><br style="font-family:arial,sans-serif;font-size:12.8px"><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">echo |openssl verify -verbose -purpose sslclient -issuer_checks -CApath</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">C:\Data\Openssl\demoCA\certs -CAfile client.pem client.pem</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">client.pem: /CN=cn/O=o/L=L/ST=il/C= c</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">error 29 at 0 depth lookup:subject issuer mismatch</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">/CN=cn/O=o/L=L/ST=il/C= c</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">error 29 at 0 depth lookup:subject issuer mismatch</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">/CN=cn/O=o/L=L/ST=il/C= c</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">error 29 at 0 depth lookup:subject issuer mismatch</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">/CN=cn/O=o/L=L/ST=il/C= c</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">error 29 at 0 depth lookup:subject issuer mismatch</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">/CN=cn/O=o/L=L/ST=il/C= c</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">error 20 at 0 depth lookup:unable to get local issuer certificate</span><br style="font-family:arial,sans-serif;font-size:12.8px"><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">Regards</span><br style="font-family:arial,sans-serif;font-size:12.8px"><span style="font-family:arial,sans-serif;font-size:12.8px">Anil</span><br clear="all"></div><div><br></div><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><div class=""><font color="#999999" class="">Sent with <a href="https://mailtrack.io/install?source=signature&lang=en&referral=anilmathew001@gmail.com&idSignature=22" class="">MailTrack</a></font></div><img width="0" height="0" class="mailtrack-img" src="https://mailtrack.io/trace/mail/7ad116866865fd531c06188e7bad48a29020674d584452.png"></div>