search

net-snmp / net-snmp

A SNMP application library, tools and daemon
Other
326 stars 217 forks source link

Client side fails to validade ca chain Trust #62

Open chicoze opened 4 years ago

chicoze commented 4 years ago

I have a .crt file with the intermediate and root certificate (ca-chain file). I tested with openssl and it works as expected. I configured the SNMPD (server) and it works. Then replies with its certificate and the client fails to resolve ca-chain.

tls verification failure: ok=0 ctx=0x7ffc6dabadc0 depth=0 err=20:unable to get local issuer certificate

sudancovid19 commented 4 years ago

if i understand it correctly you might need to concatenate your certs especially if you have intermediatery CAs or install ca cert suggest may be to test using the following commands:


openssl verify chain.pem
openssl verify -CAfile chain.pem cert.pem