LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 11-07-2008, 06:26 AM   #1
aravinda78
LQ Newbie
 
Registered: Nov 2008
Posts: 8

Rep: Reputation: 0
Building a certificate chain from the certificate using openSSL


Hi All,

I have a small doubt regarding SSL. I am making a library for certificate management and key store which will be used by applications. There is one API which will verify the certificate passed by the application.To verify the certificate i have to make the certificate chain till ROOT CA. Is it possible to make the certificate chain from a certificate ? I don't have any link with SSL session, just i will get one certificate in X509 * format.I have a default database of ROOT CA but i don't have the intermediate CA.How to prepare the cert chain from the application supplied certificate ?

Thanks in advance,

Bye,
Aravind.
 
Old 11-10-2008, 01:51 AM   #2
chort
Senior Member
 
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660

Rep: Reputation: 69
You either need to install all possible intermediate CA certs in your application's database, or the clients have to present the bundled certificate, which you have pretty much no control over.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Can I retrieve certificate expiry date from an openssl certificate (command line) davee Linux - Security 1 07-21-2006 10:28 AM
why can't i generate a new certificate with openssl? achouramira Linux - Security 1 04-28-2005 07:15 AM
OpenSSL + Apache certificate, how? The_Nerd Linux - Software 2 12-26-2004 09:18 PM
Thawte Certificate and OpenSSL jqcaducifer Linux - Security 5 10-16-2003 06:43 PM
Certificate with OpenSSL gr33ndata Linux - Security 3 10-03-2003 07:39 AM


All times are GMT -5. The time now is 03:37 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration