Received: from localhost (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id 745B16324D0 for ; Wed, 21 Jan 2009 17:24:55 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 87820-05 for ; Wed, 21 Jan 2009 17:24:52 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from locust.cns.vt.edu (locust.cns.vt.edu [198.82.169.14]) by mail.postgresql.org (Postfix) with ESMTP id 88E5363248C for ; Wed, 21 Jan 2009 17:24:52 -0400 (AST) Received: by locust.cns.vt.edu (Postfix, from userid 986) id ED62B118DC8; Wed, 21 Jan 2009 16:24:50 -0500 (EST) Date: Wed, 21 Jan 2009 16:24:50 -0500 From: Ray Stell To: Carol Walter Cc: pgsql-admin@postgresql.org Subject: Re: ssl database connection problems... Message-ID: <20090121212450.GA14677@cns.vt.edu> References: <752F2E74-9F28-4E3D-869C-93357751AFA0@indiana.edu> <20081230023630.GA19239@cns.vt.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.17 (2007-11-01) X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200901/105 X-Sequence-Number: 31152 On Wed, Jan 21, 2009 at 12:50:23PM -0500, Carol Walter wrote: > -bash-3.00$ /usr/local/ssl/bin/openssl verify -CAfile ./root.crt > testcert.pem > Error loading file ./root.crt > 24149:error:02001002:system library:fopen:No such file or > directory:bss_file.c:126:fopen('./root.crt','r') root.crt is just my self signed root authority cert. It is just a file I created/named with openssl for testing. You place whatever file is the public side of the chain (you got it from the signing authority) somewhere and tell the command where to look with the -CAfile flag. The file testcert.pem was signed by that auth and so is paired with root.crt.