[openssl-users] Why can not get certificate chain if certificate expire

[Richard Moore]

On 17 December 2014 at 08:08, Jerry OELoo <oyljerry at gmail.com> wrote:
>
> Hi All:
> I am using openssl api to get website's certificate chain. Now, For
> normal website, it works fine.
> Now I encounter a website which certificate is expire,
> https://soknad.sparebank1.no
>
>
The server is misconfigured and is only transmitting the leaf certificate -
it's missing the intermediates. So you're getting all the certificates it's
sending - one.

Rich.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.opensslfoundation.net/pipermail/openssl-users/attachments/20141217/bc4f3acb/attachment.html>