J
J
J_o_k_e_R2014-09-20 00:22:36
OpenSSL
J_o_k_e_R, 2014-09-20 00:22:36

How to use your root certificates for openssl on OS X 10.9?

Hello!
I use certificates from cacert.org all over the place.
In those systems in which the cacert root certificate is not initially trusted, I installed it. Including the system keychain under OS X 10.9. So in safari, for example, a server ssl certificate from cacert is normally accepted.
Problem with applications that use the openssl library under OS X: wget, owncloud client. The certificate does not pass.
I tried to throw the root certificate both in /System/Library/OpenSSL and in /opt/local/etc/openssl using what I found on the Internet (I have openssl from macports in addition to the system one). All the same, neither wget nor owncloud client accepts the certificate.
openssl (both versions) says this:
openssl s_client -showcerts -connect domain.ru:443
CONNECTED(00000003)
depth=0 CN = *.domain.ru
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = *.domain .ru
verify error:num=27:certificate not trusted
verify return:1
depth=0 CN = *.domain.ru
verify error:num=21:unable to verify the first certificate
verify return:1

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question