Hi.
I'am trying to install a Comodo Cert to perdition and replace the
self-signed certs.....
From Comodo i have:
- enjoy_comodo_ssl.crt
- commercial.key
- Entrust Root
- intermediate certificate (AAA Intermediate)
With "Entrust Root" and "intermediate certificate" I create one file
and
that put in: ssl_ca_chain_file
I created that file this way: cat EntrustSecureServerCA.crt
AAACertificateServices_2.crt > /tmp/ca_bundle.crt
I have modify the following lines:
ssl_cert_file /path/to/enjoy_comodo_ssl.crt
ssl_key_file /path/to/commercial.key
ssl_ca_chain_file /path/to/ca_bundle.crt
Then i restarted Perdition, and when i run:
openssl s_client -port 993
depth=0 /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las
Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios
Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las
Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios
Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard
verify error:num=27:certificate not trusted
verify return:1
depth=0 /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las
Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios
Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard
verify error:num=21:unable to verify the first certificate
verify return:1
Verify return code: 21 (unable to verify the first certificate)
Why can not verify the cert?, What i am doing wrong?
when i connect with Outlook I got the same error.
Thanks a lot...
Michael.-