[openssl-users] Why can not get certificate chain if certificate expire

Jerry OELoo oyljerry at gmail.com
Thu Dec 18 02:08:23 UTC 2014


Hi Rich:
But why browser Chrome can show all certificate path? How did it do? Thanks!

On Wed, Dec 17, 2014 at 5:49 PM, Richard Moore <richmoore44 at gmail.com> wrote:
>
>
> On 17 December 2014 at 08:08, Jerry OELoo <oyljerry at gmail.com> wrote:
>>
>> Hi All:
>> I am using openssl api to get website's certificate chain. Now, For
>> normal website, it works fine.
>> Now I encounter a website which certificate is expire,
>> https://soknad.sparebank1.no
>>
>
> The server is misconfigured and is only transmitting the leaf certificate -
> it's missing the intermediates. So you're getting all the certificates it's
> sending - one.
>
> Rich.
>
>
> _______________________________________________
> openssl-users mailing list
> openssl-users at openssl.org
> https://mta.opensslfoundation.net/mailman/listinfo/openssl-users
>



-- 
Rejoice,I Desire!


More information about the openssl-users mailing list