On 27.05.2016 19:07, Jiri Kremser wrote:
"
The server presented a certificate that could not be verified:
subject: /O=Red Hat/OU=prod/CN=Intermediate Certificate Authority
issuer: /C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat
IT/CN=Red Hat IT Root CA/emailAddress=infosec(a)redhat.com
<mailto:infosec@redhat.com>
error code 2: unable to get issuer certificate
"
The root cause is that CA certificate has the empty issuer field. I'll
set up my own nginx as a reverse proxy with a certificate that will pass
the verification for now to record the VCRs for the client, but whatever
method for creating a default certificate we choose, it needs to pass
the if the SSL_VERIFY_PEER flag is set
(
https://www.openssl.org/docs/manmaster/ssl/SSL_CTX_set_verify.html)
I'm not sure I understand the problem. Note that this is a certificate
generated by a Red Hat internal CA, so, you might need to import Red
Hat's root CA.
- Juca.