Forum Discussion
rfernandez_1884
Nimbostratus
Feb 02, 2016I need to verify an ssl certificate chain with a certificate
I'm on LTM version 11.6 and I was using the following command. openssl verify -CAfile /directory of cert chain.crt /certificate path certificate.crt
1 Reply
- Kevin_Stewart
Employee
The CApath option requires that the certificates be named uniquely based on a hash of their name, with a .0 extension.
Example: 1285dfe1.0If you have all of the CA certs in a folder by themselves, you can use the following to rename them all:
for c in $(ll |awk -F" " '{ print $9 }'); do mv $c `openssl x509 -hash -noout -in $c`.0; doneSo then you should have a folder full of correctly named CA certs. Example:
11cb4926.0 3c3c7119.0 67cbed36.0 7ace50d5.0 8bfc458a.0 eeb8b5c6.0And now your openssl verify -CApath command should work.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
