Otdfbt

What is the strongest case that can be made in favour of the UK regaining some control over fishing policy after Brexit?

How do I deal with a coworker that keeps asking to make small superficial changes to a report, and it is seriously triggering my anxiety?

Binary Numbers Magic Trick

How could Tony Stark make this in Endgame?

Exchange,swap or switch

Error message with tabularx

What is the difference between `command a[bc]d` and `command `ab,cd`

How to solve constants out of the internal energy equation?

What is Niska's accent?

Does a semiconductor follow Ohm's law?

How can I practically buy stocks?

Why other Westeros houses don't use wildfire?

how to find the equation of a circle given points of the circle

Is there an official tutorial for installing Ubuntu 18.04+ on a device with an SSD and an additional internal hard drive?

What happened to Captain America in Endgame?

How do I reattach a shelf to the wall when it ripped out of the wall?

Combinable filters

How to creep the reader out with what seems like a normal person?

Normal Map bad shading in Rendered display

French for 'It must be my imagination'?

What are the potential pitfalls when using metals as a currency?

What does the "ep" capability mean?

Don’t seats that recline flat defeat the purpose of having seatbelts?

Phrase for the opposite of "foolproof"

Verify return code: 21 sometimes

Adding root certificate to CentOS 5Checking the issued and expiry dates for the certificates involved a certificate chainHow to debug certificate chains with OpenSSL?HAProxy - ssl client ca chain cannot be verifiedssl certificate self signed instead of validTesting an SMTP server with SSL?Verify return code: 21 (unable to verify the first certificate)Difference between openssl's verify and s_clientTrying to connect to LDAPS (Windows active directory) but keep receiving Verify return code: 20 (unable to get local issuer certificate) errorOpenSSL/HAProxy verify client certificates using a non-CA certificate

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

-1

I installed a certificate to my Apache2 server and when I test with openssl s_client -connect 127.0.0.1:443 I get some times Verify return code: 0 (ok) but mostly Verify return code: 21 (unable to verify the first certificate).

The tests are done on the server, just by executing the same command with a couple of seconds between each. Does anyone know why the mixed results?.

P.S.: The certificates are issued by Digicert.

EDIT

BTW, I verify the certificate chain against the certificate given by Digicert and get OK:

openssl verify -CAfile /etc/digicert/cert.chain /etc/digicert/cert.pem
/etc/digicert/cert.pem: OK

openssl apache2

share|improve this question

edited Apr 20 at 12:27

leonardorame

asked Apr 20 at 12:20

leonardorameleonardorame

1538

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Noone can really help you if not showing the certificates you are testing... Nor the traces shown by openssl. Add -msg and/or -showcerts to see the certificates returned by the server, obviously it is not the same in both cases.
  
  – Patrick Mevzek
  Apr 20 at 21:56
  

  
  
  
  

add a comment | 

-1

I installed a certificate to my Apache2 server and when I test with openssl s_client -connect 127.0.0.1:443 I get some times Verify return code: 0 (ok) but mostly Verify return code: 21 (unable to verify the first certificate).

The tests are done on the server, just by executing the same command with a couple of seconds between each. Does anyone know why the mixed results?.

P.S.: The certificates are issued by Digicert.

EDIT

BTW, I verify the certificate chain against the certificate given by Digicert and get OK:

openssl verify -CAfile /etc/digicert/cert.chain /etc/digicert/cert.pem
/etc/digicert/cert.pem: OK

openssl apache2

share|improve this question

edited Apr 20 at 12:27

leonardorame

asked Apr 20 at 12:20

leonardorameleonardorame

1538

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Noone can really help you if not showing the certificates you are testing... Nor the traces shown by openssl. Add -msg and/or -showcerts to see the certificates returned by the server, obviously it is not the same in both cases.
  
  – Patrick Mevzek
  Apr 20 at 21:56
  

  
  
  
  

add a comment | 

I installed a certificate to my Apache2 server and when I test with openssl s_client -connect 127.0.0.1:443 I get some times Verify return code: 0 (ok) but mostly Verify return code: 21 (unable to verify the first certificate).

The tests are done on the server, just by executing the same command with a couple of seconds between each. Does anyone know why the mixed results?.

P.S.: The certificates are issued by Digicert.

EDIT

BTW, I verify the certificate chain against the certificate given by Digicert and get OK:

openssl verify -CAfile /etc/digicert/cert.chain /etc/digicert/cert.pem
/etc/digicert/cert.pem: OK

openssl apache2

share|improve this question

edited Apr 20 at 12:27

leonardorame

asked Apr 20 at 12:20

leonardorameleonardorame

1538

openssl verify -CAfile /etc/digicert/cert.chain /etc/digicert/cert.pem
/etc/digicert/cert.pem: OK

share|improve this question

edited Apr 20 at 12:27

leonardorame

asked Apr 20 at 12:20

leonardorameleonardorame

1538

share|improve this question

edited Apr 20 at 12:27

leonardorame

asked Apr 20 at 12:20

leonardorameleonardorame

1538

asked Apr 20 at 12:20

leonardorameleonardorame

1538

asked Apr 20 at 12:20

leonardorameleonardorame

1538