no chain of trust to root cert

Archived
1

HTTP get fails when using EnablePeerVerification(true) on an https server with an intermediate certificate with VeriSign Trust Network that goes to a root cert and it is valid according to

This suggests that root certs installed in the system are out of date.

2

You need to specify which Certificate Authorities to trust. You can specify our default bundle (same as Firefox) with:


roUrlTransfer.SetCertificatesFile("common:/certs/ca-bundle.crt")

Or use the same call to specify a crt file in your pkg.

–Kevin

3

Thanks, Kevin. That did the trick perfectly.

4

Ah answered my own question.. was quite easy. I just viewed the certificate chain via firefox, grabbed the certificate at the top of the chain and created a pem file with it, and used called that in the brightscript code. I thought the intermediate CA certificate was good enough but it wasn’t. Problem solved.

5

can you send me snippet code how to do that to solved certificate problem

please…