Error 20 at 0 depth lookup:unable to get local issuer certificate. Самоподписанный сертификат

Иногда, OpenSSL может ругаться на X509 сертификат, который содержит поля расширений, такие как, например, «использование ключа».

Будем считать что у нас есть самоподписанный сертификат certfile.crt с установленным расширением «использвание ключа», в котором написано (т.е. сертификат может быть использован для этих целей): Цифровая подпись, Неотрекаемость, Шифрование данных, Согласование ключей (d8)

В этом случае при попытке проверить валидность сертификата

[root@ejbca-uc]# openssl verify -CAfile certfile.crt certfile.crt

получим

error 20 at 0 depth lookup:unable to get local issuer certificate

Если сертификат не самоподписанный, а выдан каким-то УЦ, то подобная ошибка может означать, что в цепочке отсутствует один или несколько промежуточных сертификатов. Но в данном случае сертификат — самоподписанный. Поэтому странно, что вылетает ошибка, смысл которой в том, что не найден сертификат, выпустивший тот сертификат, который мы проверяем.

Как оказывается, openssl очень умен и при подобной проверке ему не достаточно просто сравнить CN certfile.crt certfile.crt, которые, естественно совпадают, т.к. файл один и тот же. Что делает openssl? Он выполняет аж несколько проверок:

То есть, если расширение key-usage в сертификае в принципе есть (а оно всегда есть в V3 сертификатах, которые формируются средствами windows), то в нем обязательно должно быть указано KU_KEY_CERT_SIGN (т.е. подпись сертификатов). Если в поле key-usage свойство  KU_KEY_CERT_SIGN не прописано, openssl проверяет сертификат, который играет роль сертификата CA и видит, что он не имеет права подписывать сертификаты и выдает ту самую ошибку.


Не забывайте оставлять комментарии, если пост был вам полезен!
Опубликовано в Сети Метки: , , ,
120 comments on “Error 20 at 0 depth lookup:unable to get local issuer certificate. Самоподписанный сертификат
  1. Sergey Ryzhkov:

    CERT_SIGN для самоподписанного, да уж хитро(

  2. best tick medicine for dogs acheter reductil en ligne free android games for tablets

  3. limitless website! maroon in up the cyclopean work. visit my website only if you are overwhelming 21 check this online sextoys portal

  4. XRumerTest:

    Hello. And Bye.

  5. Строительство и ремонт, читайте сайт roofor.ru

  6. MichaelKnite:

    Spend money on AN ESSAY Over the internet Via Pay money for ESSAY CLUB. At this time college students get dozens of various duties. They solely really do not have enough time for you to do all of these due to super tutorial overload. Essay writing — an individual would say it is usually a straightforward chore. However it is out of the question to find the possibility, time and inspiration to carry out all responsibilities consistent with deadlines. To purchase essay is mostly a effective way out. Our company provides to order essays web based. We perform 24 hours just about every working day in your case creating papers devoid of any faults, plagiarism or matter discrepancy. You can buy essays without delay on our homepage. If you’d like to buy an essay web-based, our team of trained pros is able to guide. Our provider can provide the companies for college students throughout the world. Consider no more: purchase essays from the internet to receive superb papers published in accordance with your recommendations.

    http://www.polisportchieri.it/2016/03/25/greatest-customizable-paper-at-any-time-before/

  7. Deweyhaw:

    If you have a desire to learn how to earn from $ 500 per day and work only for yourself, then write to us at email: admin@makemoneyonline.universalxyzdom.xyz

  8. ?Are You Unable To Cope With Your New Coursework Requirement? Desire to Outrun Your Classmates Which includes a Reliable Coursework Producing Company Guidance?
    Simply Connect With Coursework On the net & Acquire Professional Coursework Help To Secure The Most useful Grades In a very Hassle Zero cost Manner….
    Inside UK, school, college too as university students absolutely need help with coursework when they are assigned by using a tough topic and deadline. This is considering a wide range of teenagers face difficulties within the different phases of their new producing assignments . Most students desire coursework providers when they aim to produce an engaging composition as for every assigner instruction. You’ll be amazed to know that even when composing an engaging academic challenge, some students have as a great deal problem as waking up on Monday morning . Developing a perfect paper seriously isn’t a rocket science it’s the lack of time and knowledge in that persuade you to definitely obtain assistance from internet coursework writers UK. Listed here are some reasons why you never would like to cope with hectic issues to pen down an extremely engaging academic paper.
    Mind Mapping
    Generating new ideas is 1 from the hectic conditions of every academic undertaking in which students have got to counter so most distractions to produce impressive ideas
    Staying Focused
    No doubt focusing on studies is the greatest weakness for every student simply because nowadays they could easily get distracted through social networking and cellular products
    Coursework Proofreading
    It is vital for students to detect the mistakes and irrelevant knowledge that’s current in their paper to pen down a mistake-free academic job before submission date
    Do not hurt your career…If you will be not competent enough to write down a unique paper independently like your class top scorers. Our using the net coursework producing program UK would strengthen you to definitely post a Premium-Quality paper within just your instructor informed date.
    Get Coursework Creating Help from us to Amaze Your Class Topper & Reviewers with Exceptional Work…
    Our in-house dedicated team of writers make sure to pen down relevant and unique important information only. They are effectively equipped with authentic educational resources that empower them to write down exclusive advice on any tough topic inside a very quick manner.
    When you are willing to surprise your reviewer by a well-prepared class task, then you should connect with our top coursework crafting products and services today to grow your career proactively.
    Our Superb Coursework Internet based Products and services Will Make You Feel really Like A King!!
    On Time Challenge Delivery We would hand over your ordered paper in your mentioned time to fulfil our commitment
    Uninterrupted Help Model Our customer service staff remained active throughout the working day & night to overcome student’s issues instantly
    100% Money Back again Guarantee We never disappoint students with poor give good results that why we offer them refund when they ask us
    Countless Revisions Facility Our passionate writer’s team would provide you with you uncountable completely free revisions as for every your instructions
    Strict Privacy Policy We take strict measures to hide your privacy from absolutely everyone existing insight or outsight our firm
    Say No to Plagiarism Our excellent control team completely analyse prepared operate with plagiarism detector apps to forward 100% original papers to students
    Awesome Companies with Exciting Has & High-quality Discount
    By hiring our solutions, you will not only get expert’s assistance within a hassle completely free manner but also get exclusive discounts. We believe that discount is the right of every student that’s why offering listed here 15% straightaway discount with mind-blowing perks . Visit our pricing web page right absent to get benefits of our useful deals.

  9. Consultant SEO freelance à Paris, j’accompagne les petites, moyennes et grosses entreprises dans leur stratégie de référencement | ☎ 06 88 81 72 90 | Skype : seowllc

  10. online public health masters acheter stilnox prescription fungal nail treatment

  11. greek god of medicine comprar trankimazin 2 mg visual land — prestige 10 tablet with 16gb memory

  12. charlotte county health department faustan rezeptfrei kaufen doctor who season 7 episode 7 online free

  13. doctor note template free buy belviq online canada david tennant 10th doctor

  14. Wie Teuer Ist Viagra Buy Nexium From Mexico Non Prescription Cymbalta viagra cialis Combivent Inhaler Order On Line No Rx Pharmacies Shipping To Usa Medicament Cytotec Sans Ordonnance

  15. Online Pharmacies Cialis 5 Mg Viagra Stl Buy Online Propecia Success The Bald Truth viagra Venta De Viagra Levitra Cialis Acquistare Finasteride Propecia Medical Amoxil Antibiotics

  16. places to buy prescription glasses http://www.jefaismonsite.fr/stilnox holistic medicine raleigh nc

  17. Where To Buy Secure Generic Progesterone In Australia Where Can I Buy Nolvadex Pct levitra super pro isotretinoin website next day store by money order Otitis Media And Cephalexin

  18. big sky family medicine http://sibutramina.esmiweb.es/ best way to lower cholesterol without drugs

  19. Simvastatin Side Effects Medicina Online Propecia Preis Cialis 5mg cialis Cialis Nebenwirkungen Prostata Amoxicillin Clavulanate Potassium Web Md

  20. Hello! Someone in my Myspace group shared this website with us so I came to give it a look. I’m definitely loving the information. I’m book-marking and will be tweeting this to my followers! Outstanding blog and terrific design.

Добавить комментарий

Ваш e-mail не будет опубликован. Обязательные поля помечены *

*

Заодно посмотрите мои фоты в моем профиле вконтакте. Любые вопросы по существу статей можете задать там же.

Hostenko — лучший WordPress-хостинг