I'm new to using OpenSSL and currently using it in Windows trying to troubleshoot for the party connecting to our server.
openssl s_client -connect servername:443 CONNECTED(00000134) depth=0 CN = servername verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 CN = servername verify error:num=21:unable to verify the first certificate verify return:1 [other details follow...]
After a few search I realize that I need to specify the path for the trusted root ca.
-CApath directory The directory to use for server certificate verification. This directory must be in "hash format", see verify for more information. These are also used when building the client certificate chain.
The only problem I have is that most online example are using unix based systems so the examples are usually like the one just above. I'm not too familiar with unix so I assume if my CA are in
then the ca path parameter goes like this one below. The CA are in .cer / .crt format.
However, I still get the same result so I'm not so sure if I understand this correctly.