[Pubcookie-users] Pubcookie 3.0.0b3 installation issues

[Lawrence Greenfield]

   Date: Thu, 16 Jan 2003 14:30:23 -0500
   From: Scott Adkins <adkinss at ohio.edu>
[...]
   Finally, the ginkgo.key and ginkgo.cert files are the same files used by
   our web server.  The verisign.ca file was created from what I found at the
   following web location (which I think should be listed in the docs):

     http://www.verisign.com/support/install/intermediate.html

If this has _only_ the intermediate certificate, it is not
sufficient. You also need the root certificate, since OpenSSL does not
know Verisign's root certificate without you telling it.

If you add Verisign's root cert to this file, this error:

     Jan 16 14:25:56 ginkgo2a syslog: verifying peer certificate... ok=0
     Jan 16 14:25:56 ginkgo2a syslog: verify error:num=20:unable to get local
	 issuer certificate
     Jan 16 14:25:56 ginkgo2a syslog: SSL_accept: error:140890B2:SSL routines:
	 SSL3_GET_CLIENT_CERTIFICATE:no certificate returned

should go away. Basically, it's trying to trace the cert chain up but
can't find the root cert.

This sort of error message should probably go into a question/answer
section somewhere. Hmmm.

Larry