[xmlsec] self signed certificate in chain

Michiels Olivier olivier.michiels@ubizen.com
Mon, 18 Aug 2003 11:13:40 +0200 

--MIMEStream=_0+103642_213297602274_70340004703
Content-type: text/plain
Content-transfer-encoding: 7BIT

Hi,
I've a xml file signed by a certificate. This certificate has been
signed by a root which is part of a hierarchy of roots.
operational root signed by a primary root signed by a top root.

When I try to verify the xml file the xmlsec lib print the following
error message:
func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=351:obj=x509-store:subj=unknown:error=71:certificate verification failed:err=19;msg=self signed certificate in certificate chain
which is true, the top root is a self signed certificate.
What's wrong ? Another special option I've to put in my verifier ?

Thanks,

Olivier

--MIMEStream=_0+103642_213297602274_70340004703
Content-type: text/html; charset=utf-8
Content-transfer-encoding: 7BIT

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/3.0.8">
</HEAD>
<BODY>
Hi,<BR>
I've a xml file signed by a certificate. This certificate has been signed by a root which is part of a hierarchy of roots.<BR>
operational root signed by a primary root signed by a top root.<BR>
<BR>
When I try to verify the xml file the xmlsec lib print the following error message:<BR>
func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=351:obj=x509-store:subj=unknown:error=71:certificate verification failed:err=19;msg=self signed certificate in certificate chain<BR>
which is true, the top root is a self signed certificate.<BR>
What's wrong ? Another special option I've to put in my verifier ?<BR>
<BR>
Thanks,<BR>
<BR>
Olivier
</BODY>
</HTML>

--MIMEStream=_0+103642_213297602274_70340004703--