Newer releases of OpenSSL return X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT instead of X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY

Joe Orton joe at manyfish.co.uk
Wed Dec 30 16:42:05 EST 2009


On Mon, Dec 28, 2009 at 04:57:22PM -0800, Tom C wrote:
> After upgrading my openssl library, neon fails to perform the
> accept/reject conversation.  After some debugging and bunch of
> playing around, it appears that OpenSSL 0.9.8l returns
> X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT, while prior versions return
> X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY.   Both errors, in my
> mind, should be handled similarly.
> 
> I am submitting a patch that treats
> X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT the same as
> X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY.

Hi there.  Thanks a lot for tracking this down and submitting a patch!  
I'd seen those reports from SVN users a few times.  I've released neon 
0.29.2 with this fix.

Regards, JOe



More information about the neon mailing list