Share your knowledge at the LQ Wiki.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 11-07-2008, 07:26 AM   #1
LQ Newbie
Registered: Nov 2008
Posts: 8

Rep: Reputation: 0
Building a certificate chain from the certificate using openSSL

Hi All,

I have a small doubt regarding SSL. I am making a library for certificate management and key store which will be used by applications. There is one API which will verify the certificate passed by the application.To verify the certificate i have to make the certificate chain till ROOT CA. Is it possible to make the certificate chain from a certificate ? I don't have any link with SSL session, just i will get one certificate in X509 * format.I have a default database of ROOT CA but i don't have the intermediate CA.How to prepare the cert chain from the application supplied certificate ?

Thanks in advance,

Old 11-10-2008, 02:51 AM   #2
Senior Member
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660

Rep: Reputation: 69
You either need to install all possible intermediate CA certs in your application's database, or the clients have to present the bundled certificate, which you have pretty much no control over.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Can I retrieve certificate expiry date from an openssl certificate (command line) davee Linux - Security 1 07-21-2006 11:28 AM
why can't i generate a new certificate with openssl? achouramira Linux - Security 1 04-28-2005 08:15 AM
OpenSSL + Apache certificate, how? The_Nerd Linux - Software 2 12-26-2004 10:18 PM
Thawte Certificate and OpenSSL jqcaducifer Linux - Security 5 10-16-2003 07:43 PM
Certificate with OpenSSL gr33ndata Linux - Security 3 10-03-2003 08:39 AM

All times are GMT -5. The time now is 08:15 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration