Error 20 at 0 depth lookup:unable to get local issuer certificate. Самоподписанный сертификат

Иногда, OpenSSL может ругаться на X509 сертификат, который содержит поля расширений, такие как, например, «использование ключа».

Будем считать что у нас есть самоподписанный сертификат certfile.crt с установленным расширением «использвание ключа», в котором написано (т.е. сертификат может быть использован для этих целей): Цифровая подпись, Неотрекаемость, Шифрование данных, Согласование ключей (d8)

В этом случае при попытке проверить валидность сертификата

[root@ejbca-uc]# openssl verify -CAfile certfile.crt certfile.crt


error 20 at 0 depth lookup:unable to get local issuer certificate

Если сертификат не самоподписанный, а выдан каким-то УЦ, то подобная ошибка может означать, что в цепочке отсутствует один или несколько промежуточных сертификатов. Но в данном случае сертификат — самоподписанный. Поэтому странно, что вылетает ошибка, смысл которой в том, что не найден сертификат, выпустивший тот сертификат, который мы проверяем.

Как оказывается, openssl очень умен и при подобной проверке ему не достаточно просто сравнить CN certfile.crt certfile.crt, которые, естественно совпадают, т.к. файл один и тот же. Что делает openssl? Он выполняет аж несколько проверок:

То есть, если расширение key-usage в сертификае в принципе есть (а оно всегда есть в V3 сертификатах, которые формируются средствами windows), то в нем обязательно должно быть указано KU_KEY_CERT_SIGN (т.е. подпись сертификатов). Если в поле key-usage свойство  KU_KEY_CERT_SIGN не прописано, openssl проверяет сертификат, который играет роль сертификата CA и видит, что он не имеет права подписывать сертификаты и выдает ту самую ошибку.

Не забывайте оставлять комментарии, если пост был вам полезен!
Опубликовано в Сети Метки: , , ,
360 comments on “Error 20 at 0 depth lookup:unable to get local issuer certificate. Самоподписанный сертификат
  1. It’s an amazing article for all the web users; they will get advantage from it I am sure.

  2. each time i used to read smaller posts which also clear their motive, and that is also happening with this piece of writing which I am reading at this place.

  3. It is the happiest day of my life so far, when I am watching these} funny movies at this place, because after whole day working I was so tired and now feeling perfectly.

  4. It’s awesome to pay a visit this website and reading the views of all colleagues about this piece of writing, while I am also keen of getting experience.

  5. This article offers clear idea designed for the new users of blogging, that genuinely how to do blogging.

  6. Genuinely it’s known as Search engine optimization that when i search for this piece of writing I found this web site at the top of all web pages in search engine.

  7. It’s an amazing paragraph designed for all the web users; they will obtain benefit from it I am sure.

  8. Модные женские советы здесь

  9. I don’t waste my free time in watching video clips but I go for to read posts on net and get updated from most recent technologies.

  10. Hello colleagues, is there any other pleasant web site related to JavaScript content, while this one is nice in favor of PHP programming.

  11. Stephenslort:

    lincoln prairie behavioral health center natural medicine for high blood pressure

  12. Wow, what a quality it is! As mostly YouTube movies have no nice quality, except this is truly a fastidious quality video.

  13. If you want to improve your experience simply keep visiting this website and be updated with the latest gossip posted here.

  14. In the present day I was so tired, and now this time I have got some rest by viewing this humorous YouTube video, thanks, keep it up.

  15. Hi there buddy, what a quality is! For this YouTube video, I am really happy, since I have never seen good quality YouTube video earlier than,

  16. buy tadalafil india no prescription buy
    buy cheap cialis online
    cialis online pharmacy canada
    cheap cialis online

  17. Hahahahahahaha, this politics related YouTube video is in fact so funny, I loved it. Thanks designed for sharing this.

  18. precio cialis en farmacia mexico otc cialis
    is out of date cialis safe

  19. What a lovely story! The tale in this YouTube video that is posted here is actually a pleasant one with having nice picture quality.

  20. Hi there it’s me Fiona, I am also visiting this web site regularly, this web page is genuinely nice and the users are actually sharing good thoughts.

  21. I’d like to find out more? I’d care to find out more details.

  22. Hello, this weekend is nice in support of me, since this time i am reading this fantastic educational article here at my home.

  23. Hi, thanks for all the viewers, I will add many more video clips in upcoming days, admin

  24. Inspiring story there. What happened after? Thanks!

  25. Ahaa, its good conversation regarding this article here at this website, I have read all that, so at this time me also commenting at this place.

  26. What’s up everyone, it’s my first visit at this website, and post is in fact fruitful in support of me, keep up posting these posts.

  27. Wow! It’s a good jQuery script; I was also searching for that, thus i got it right now from here. Keep it up admin of this site.

  28. My chief is as well eager of YouTube humorous videos, he also watch these even in company hehehe..

  29. Such are truly awesome YouTube video tutorials, its my good fortune to go to see this web site and finding these cool YouTube video tutorials.

  30. This post about SEO is really fastidious one, and the back links are really very helpful to promote your site, its also known as Search engine optimisation.

  31. These are in fact wonderful ideas in concerning blogging. You have touched some good points here. Any way keep up wrinting.

  32. Wow, this piece of writing is nice, my younger sister is analyzing these things, therefore I am going to tell her.

  33. Awesome video, actually a pleasant quality, this YouTube video touched me a lot in terms of quality.

  34. YouTube is world’s largest video sharing website, no one can defeat it. Every one upload video lessons at YouTube afterward take embed code and post everywhere.

  35. For my study reasons, I always used to get the video lectures from YouTube, for the reason that it is easy to fan-out from there.

  36. If you apply such techniques for increasing traffic on your own blog, I am certainly you will notice the difference in few days.

  37. Hello everyone, I am sure you will be enjoying here by watching these kinds of comical videos.

  38. The methods mentioned in this article on the topic of to increase traffic at you own webpage are actually good, thanks for such fastidious post.

  39. All right, you are right buddy, on a regular basis updating web site is really needed in support of Web optimization. Pleasant discussion keeps it up.

  40. This video post is truly impressive, the sound quality and the picture feature of this film post is in fact awesome.

  41. Genuinely it’s known as Search engine optimization that when i search for this article I found this website at the top of all blogs in search engine.

  42. I visited various sites but the audio feature for audio songs present at this web site is really fabulous.

  43. I don’t waste my free time in watching video lessons except I like to read articles on net and obtain updated from hottest technologies.

  44. Wow, what a video it is! Really pleasant quality video, the lesson given in this video is truly informative.

  45. This article will help the internet people for creating new webpage or even a blog from start to end.

  46. Yup, you are accurate Google is the most excellent for blogging, Google’s web site as well come up to quickly in search engines too.

  47. homeowner insurance quotes best home insurance home insurance quotes — house insurance quotes online comparison

  48. Actually movie is the presentation of some one’s feelings; it offers the lesson to the viewers.

  49. I have study much about free blogging websites, except I have no clear idea concerning that, can any one advise me which one is finest in favor of free blogging and site-building?

  50. Sketches are actually nice source of instruction instead of text, its my familiarity, what would you say?

  51. When I saw this site having remarkable quality YouTube video tutorials, I decided to watch out these all videos.

  52. Hi my colleagues, how is everything? Here it is genuinely nice YouTube videos collection. i enjoyed a lot.

  53. cheap auto insurance in california car insurance quotes california auto insurance quotes online instant auto insurance quotes

  54. house insurance quotes online comparison home insurance quotes compare home insurance quotes online — home insurance quotes

  55. As you want something super new? Take a look at this website. Only there the choice of wettest pussies for every desire and completely free! They are obedient slaves, they will and want implement anything you say !

  56. dr steven gundry diet dr. steven gundry dr. gundry’s diet evolution dr gundry gundry gundry steven gundry diet metabolism

  57. dr gundry supplements dr gundry dr gundry foods with lectins gundry md lectin shield reviews gundry supplements prebiotics supplement gundry

  58. affordable life insurance for seniors compare life insurance minnesota mutual life insurance company term life insurance rates

  59. Отличные строительные советы здесь

  60. Последние женские новости здесь

  61. slim:

    dr steven gundry diet body detox dr gundry supplements belly bloat food rich in polyphenols polyphenol gundry gundry

  62. Well spoken certainly. !
    when does erectile dysfunction happen
    ed drugs generic
    erectile linked diabetes
    buy erectile dysfunction pills online

  63. homeowner insurance quotes homeowners insurance quotes florida homeowner insurance quotes comparison — homeowner insurance quotes

  64. house insurance quotes home insurance quotes metlife auto and home insurance — home insurance quotes

  65. car insurance quote online car insurance online car insurance instant quote pemco auto insurance

  66. Many thanks, Numerous content.

    erectile medication where to purchase

  67. home insurance quote geico home insurance quote homeowners insurance — compare the market home insurance

  68. metlife auto insurance phone number vehicle insurance car insurance cheap goautoinsurance

  69. home insurance quotes metlife auto and home insurance home insurance quotes — best insurance company for home and auto

  70. affordable health insurance plans health insurance plans best individual health insurance plans insurance agencies

  71. homeowners insurance quotes comparison homeowners insurance quotes compare the market home insurance quotes — homeowners insurance quotes

  72. best non prescription online pharmacies
    online pharmacies
    canada drug

  73. prix du cialis 20 boite de 4
    cialis 20mg
    can you take cialis with ace inhibitors
    cialis 20mg

  74. top rated auto insurance companies 2017 online car insurance car insurance quote online car insurance

  75. credit loans guaranteed approval poor credit loans debt consolidation with bad credit — bad credit loans direct lenders

  76. viagra news edinburgh tid cfm
    viagra for sale uk
    effects of viagra in women
    viagra for women

  77. no prior prescription required pharmacy
    canada online pharmacies
    medical information online
    canada pharmacies online

  78. online installment loans installment loans no credit bad credit loans — installment loans no credit check

  79. installment loans no credit check installment loan installment loans no credit check installment loans for bad credit

  80. guaranteed loans loans guaranteed approval credit card debt consolidation loans payday mask

  81. cialis after radical prostatectomy
    cialis online
    cialis price in hong kong
    cialis 20 mg

  82. mexican pharmacy online medications
    canada drug
    canadian drugs without prescription
    canadian pharmacies online

Добавить комментарий

Ваш e-mail не будет опубликован. Обязательные поля помечены *


Заодно посмотрите мои фоты в моем профиле вконтакте. Любые вопросы по существу статей можете задать там же.
Hostenko — лучший WordPress-хостинг