CA no longer verifying certificates

Samuel Williams space.ship.traveller at
Sun Nov 15 01:10:36 UTC 2020


I generate a CA (self signed), and then generate a certificate from
that CA, which should be used by a HTTP/2 client and server during

This code was working as recently as 12 months ago, but it seems like
something has stopped it from verifying correctly.

Here is how the CA is generated, along with a certificate store which
is used for verification:

Later, this CA is used to generate a certificate:

Finally, we want to check that this is a valid configuration:

Like I said, this was passing, as recently as April. However, it's now
failing with error code 18: "self signed certificate".

I've tried a number of things but cannot figure out what's changed and
what I need to do to make this work again (except disable verification
completely which is not what I want).

Any ideas what I need to do to make this work again?


More information about the openssl-users mailing list