[erlang-questions] SSL: "unknown ca"

PAILLEAU Eric eric.pailleau@REDACTED
Sat Jan 31 01:59:39 CET 2015


>
>
> sorry, i am completely lost.
> who is gonna read this info from my certificate and when?
>
> also it is still completely unclear where is the ORIGIN of the error:
> "unknown ca" -- who has thrown it?

Read NOTES chapter of this link :

http://www.openssl.org/docs/ssl/SSL_CTX_set_client_CA_list.html

You need a trusted list of CA in a bundle file.

you can check your openssl settings with :

  openssl verify -verbose -purpose sslserver -CAfile 
/path/to/tls/certs/cabundle.pem /path/to/tls/certs/your_server.pem

Hope it can help.
Regards




More information about the erlang-questions mailing list