OpenSSL验证返回码:20(无法获取本地发行者证书) [英] OpenSSL Verify return code: 20 (unable to get local issuer certificate)

问题描述

我正在运行Windows Vista，并尝试通过https连接以多部分形式上载文件，但是我在使用本地颁发者证书时遇到了一些麻烦.我只是想弄清楚为什么现在不行，然后在解决后再返回我的cURL代码.我正在运行命令:

I am running Windows Vista and am attempting to connect via https to upload a file in a multi part form but I am having some trouble with the local issuer certificate. I am just trying to figure out why this isnt working now, and go back to my cURL code later after this is worked out. Im running the command:

openssl s_client -connect connect_to_site.com:443

它给了我来自VeriSign，Inc.的数字证书，但同时也射出了一个错误:

It gives me an digital certificate from VeriSign, Inc., but also shoots out an error:

Verify return code: 20 (unable to get local issuer certificate)

什么是本地发行者证书?那是我自己计算机上的证书吗?有没有解决的办法?我曾尝试使用-CAfile mozilla.pem文件，但仍然给我同样的错误.

What is the local issuer certificate? Is that a certificate from my own computer? Is there a way around this? I have tried using -CAfile mozilla.pem file but still gives me same error.

推荐答案

我遇到了同样的问题，并通过将路径传递到存储CA密钥的目录来解决了这个问题.在Ubuntu上是:

I had the same problem and solved it by passing path to a directory where CA keys are stored. On Ubuntu it was:

openssl s_client -CApath /etc/ssl/certs/ -connect address.com:443

这篇关于OpenSSL验证返回码:20(无法获取本地发行者证书)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！