Author Topic: self signed certificate in certificate chain  (Read 4984 times)

Offline adrukh

  • Newbie
  • *
  • Posts: 1
self signed certificate in certificate chain
« on: July 15, 2015, 07:41:22 AM »
Hi,

I am using python to open an HTTPS connection to a server that is using a USERTrust certificate. My application is running on an Ubuntu server.

I am having a problem validating the HTTPS server's certificate. Boiled it down to:

Code: [Select]
openssl s_client -connect <server_name>:443

The result contains this:
Code: [Select]
CONNECTED(00000003)
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
 0 s:<server details>
   i:/C=US/ST=MI/L=Ann Arbor/O=Internet2/OU=InCommon/CN=InCommon RSA Server CA
 1 s:/C=US/ST=MI/L=Ann Arbor/O=Internet2/OU=InCommon/CN=InCommon RSA Server CA
   i:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
 2 s:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
   i:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
...
...

My conclusion is that I need to add a USERTrust certificate on my server. If so, which one? If not, what can be the issue?

Thanks.

Offline Ronny

  • Retired - Product Translator
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 13551
  • Retired - Volunteer Moderator
Re: self signed certificate in certificate chain
« Reply #1 on: July 23, 2015, 04:58:46 PM »
Hi adrukh,

Welcome to the forums!
Can you please have a look here? it seems it's missing and/or failing to access an intermediate cert or missing Root CA on the system.
https://stackoverflow.com/questions/4103472/ssl-handshake-fails-with-a-verisign-chain-certificate-that-contains-two-ca-s
Retired - Volunteer Moderator
Any concerns? Please send me a PM or review the Forum Policy -  update Jan 3rd 2013!

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek