openssl verify error 20 at 0 depth lookup:unable to get local issuer certificate

When testing my certificate against intermediate and root certificate I received the following error: error 20 at 0 depth lookup:unable to get local issuer certificate. The issue is probably related to the chain of the certificate so we need to create reliable chain.

  1. My certificate needs to be merged with intermediate certificate into one file:
    $ cat intermediate.pem cert.pem > combined.pem
  2. Then we can test it using openssl verify command:
    $ openssl verify -CAfile rootcert.pem combined.pem
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s