HTTPS and Root.pem...

[Dar Scott]

I've been thinking about your error.

On Jun 5, 2005, at 3:08 PM, Andre Garzia wrote:

>  error -Error with certificate at depth: 1

The depth starts at 0.  The error is for the next depth, the signer.

> issuer   = /C=ZA

> /ST=Western Cape

> /L=Cape Town

> /O=Thawte Consulting cc

> /OU=Certification Services Division

> /CN=Thawte Server

> CA/Email=server-certs at thawte.com


> subject  = /C=ZA

> /O=Thawte Consulting (Pty) Ltd.

> /CN=Thawte SSL Domain CA


> err 20:unable to get local issuer certificate

There are separate errors for expiration, but maybe expiration at this 
level is enforced by new CA certificates.

This sure looks like you have the wrong .pem, try the openSSL with a 
site you know will work.  You should not get the 20.

It might be that your server has a forged or old signature.

Dar

-- 
**********************************************
     DSC (Dar Scott Consulting & Dar's Lab)
     http://www.swcp.com/dsc/
     Programming and software
**********************************************