[Openid-specs-ab] Issue #182: SSL Certificate for JWKs URI is giving me a OpenSSL::SSL::SSLError (openid/certification)

kshikama issues-reply at bitbucket.org
Fri Oct 23 21:26:44 UTC 2015


New issue 182: SSL Certificate for JWKs URI is giving me a OpenSSL::SSL::SSLError
https://bitbucket.org/openid/certification/issues/182/ssl-certificate-for-jwks-uri-is-giving-me

kshikama:

I'm having an issue verifying the SSL certificate for `https://op.certification.openid.net:60167/export/jwk_60167.json`.

```
#!bash

$ openssl s_client -connect op.certification.openid.net:60167/export/jwk_60167.json:443 
CONNECTED(00000003)
depth=0 /1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=Delaware/businessCategory=Private Organization/serialNumber=2158113/C=US/postalCode=94043/ST=California/L=Mountain View/street=350 Ellis Street/O=Symantec Corporation/OU=Cloud Platform Engineering
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=Delaware/businessCategory=Private Organization/serialNumber=2158113/C=US/postalCode=94043/ST=California/L=Mountain View/street=350 Ellis Street/O=Symantec Corporation/OU=Cloud Platform Engineering
verify error:num=27:certificate not trusted
verify return:1
depth=0 /1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=Delaware/businessCategory=Private Organization/serialNumber=2158113/C=US/postalCode=94043/ST=California/L=Mountain View/street=350 Ellis Street/O=Symantec Corporation/OU=Cloud Platform Engineering
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=Delaware/businessCategory=Private Organization/serialNumber=2158113/C=US/postalCode=94043/ST=California/L=Mountain View/street=350 Ellis Street/O=Symantec Corporation/OU=Cloud Platform Engineering/CN=op.certification.openid.net
   i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 EV SSL CA - G3
---
```




More information about the Openid-specs-ab mailing list