Client certificate chain file not specified
I am attempting to write a WSDL type client that consumes a secure .Net web service. The service runs over https and uses a username/password pair for authentication. I have already written a client in .Net, but need to port it to PHP.
I followed the manual and various forum posts to write the client. I've attached it to the post.
I received the error 'No CA certificate file' and followed the instructions at <a href="http://wso2.org/forum/thread/3320">thread</a> to get the server certificate. I now get the error that the client certificate chain file is not loaded and then the ca certificate failed to load. I've attached the full client log.
Now, when I ran open_ssl to get the server certificate, the output identified the certificate chain. It's using two Verisign certificates, which I assume are the intermediate and root certificates normally loaded into a browser. I'm also assuming that the errors I'm getting are telling me that the ssl module can't get to those certificates. I've attached the output. I'm not totally sure, however, because the error is that the <u>client</u> certificate chain file is not specified, but I'm not using any client certificates.
So, my question is, are my assumptions correct, and if so, does anyone know how to get the additional certificates in a format suitable for the 'CACert' parameter? Or does the problem seem to be something else?
Many thanks.
Update:
Looking around a bit more, I realized that the error I'm referencing here is an 'info' message and was not the problem. The problem was that the 'CACert' used in constructing the WSClient was failing. I used the full path to the sever certificate file and then no longer received that error. I've run into another problem, but that is a different story....
| Attachment | Size |
|---|---|
| wsf_php_client.log_.txt | 1.37 KB |
| open_ssl s_client.txt | 3.36 KB |
| client.php_.txt | 934 bytes |
- Login or register to post comments
- Printer friendly version
- 271 reads










Hi, I think the problem is
Hi,
I think the problem is for the "CACert" option you are giving the filename of the certificate and not the content. I think I was not clear on this in that forum post. Sorry about that. I have rewritten the same thing more clearly at here. http://phpwebservices.blogspot.com/2008/03/calling-https-service-with-wsclient.html
Thanks
Dimuthu