V2EX = way to explore
V2EX 是一个关于分享和探索的地方
Sign Up Now
For Existing Member  Sign In
windblueos
V2EX  ›  问与答

关于 ocserv 的证书验证问题,anyone can help me?

  •  
  •   windblueos · Oct 12, 2014 · 5670 views
    This topic created in 4228 days ago, the information mentioned may be changed or developed.
    根据ocser的官方教程,我创建好ca server以及client证书,并通过
    certtool --verify --load-ca-certificate ../ca-cert.pem --infile user-cert.pem

    Loaded 1 certificates, 1 CAs and 0 CRLs

    Subject: CN=marlonlu,OU=admins
    Issuer: CN=digitalocean CA,O=digital ocean
    Checked against: CN=digitalocean CA,O=digital ocean
    Output: Verified. The certificate is trusted.

    Chain verification output: Verified. The certificate is trusted.

    验证user-cert.pem是有效并且可行的证书,但为什么我把user-cert.pem导出p12格式的证书,ocserv反而提示
    GnuTLS error (at worker-vpn.c:732): No certificate was found


    我利用上一条命令去校验p12证书时:
    certtool --verify --load-ca-certificate ../ca-cert.pem --infile key.p12
    校验p12格式的证书,也是提示类似问题
    error parsing CRTs: No certificate was found
    No Comments Yet
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   1017 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 32ms · UTC 18:32 · PVG 02:32 · LAX 11:32 · JFK 14:32
    ♥ Do have faith in what you're doing.