[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: TLS verify errors

Hallvard B Furuseth wrote:
> Quanah Gibson-Mount writes:
>> TLS_CACERT /opt/zimbra/conf/ca/ca.pem
>> (...)
>> If I change it to TLS_CACERTDIR and adjust to a path, (...)
> 
> If I remember correctly TLS_CACERTDIR needs to be set up with some
> OpenSSL magic, it's not just a directory into which you can drop
> certificate files.  Maybe the reverse is true as well, and a cert
> from a TLS_CACERTDIR does not work in TLS_CACERT.

cd <TLS_CACERTDIR>
ln -s <CAcertfile> `openssl x509 -hash -noout -in <CAcertfile>`.0