'Unable to verify server certificate with OPENSSL s_client
The server is Liberty on z/OS. The server cert is self signed. Command issued:
openssl s_client -CApath /home/ibmsys1 -showcerts -connect zito-zos.ddns.net:19181 < /dev/null
The following is returned:
CONNECTED(00000003)
depth=0 O = IBM, OU = C54WLP, CN = START1
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 O = IBM, OU = C54WLP, CN = START1
verify error:num=21:unable to verify the first certificate
verify return:1
Certificate chain
0 s:O = IBM, OU = C54WLP, CN = START1
i:O = IBM, OU = C54WLP, CN = C54WLP Sample Certification Authority
The first in the chain is the server cert. The second is the signing certauth.
In the folder given as CApath I placed "cacert.crt" that includes the certauth signing cert for "CN = C54WLP Sample Certification Authority".
What is causing this error?
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|