Question : Openssl not accepting locally sign certificates.

I have apache, mod_ssl and openssl installed.


I keep getting error when trying to connect to the server:

OpenSSL: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca


Basically, openssl is rejecting my locally signed certificates.

How can i get this resolved.

Answer : Openssl not accepting locally sign certificates.

Here is a procedure on how to setup your own local CA:

     http://marc.info/?l=tomcat-user&m=106293430225790&w=2

You have most likely done most of this, but it is worth the review.

The import part is to import your CA's key into the trusted root certificates store on each and every computer that you want to trust keys that are signed by your local CA.

However, you may have a problem.  I am not that you will be able update the trusted root certificate store on your network devices.  You will need to check the documentation for those devices to see if you can.