Unable to trust certificate issuer

[Ashok Kumar]

Hi,

Recently installed IPROHC-0.7.1 in my ubuntu linux 10.04 LTS and run into the following error.

Mar 19 10:14:44 BCGA106 iprohc_client[2368]: local address 10.176.17.152:57837 is used to contact server
Mar 19 10:14:44 BCGA106 iprohc_client[2368]: TLS handshake succeeded
Mar 19 10:14:44 BCGA106 iprohc_client[2368]: certificate cannot be verified (status 66)
Mar 19 10:14:44 BCGA106 iprohc_client[2368]: - Unable to trust certificate issuer

Ive followed the cert generation instructions multiple times to ensure no mistakes were made. Also how to make difference in client and server PKCS#12 file...

Please advise.

Regards

Ashok

[Didier Barvaux (didier-barvaux)]

I fail to reproduce the problem. See below the test I performed. Please perform the same test on your side.

Preparation:
$ mkdir /tmp/bug1294479
$ cd /tmp/bug1294479

Installation:
$ wget https://launchpad.net/rohc/iprohc-0.7.x/iprohc-0.7.1/+download/iprohc-0.7.1.tar.gz
$ tar xzf iprohc-0.7.1.tar.gz
$ cd iprohc-0.7.1
$ cmake CMakeLists.txt -DCMAKE_INSTALL_PREFIX=/usr
-- The C compiler identification is GNU 4.7.3
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
Building from release sources
Checking for threads
-- Looking for include file pthread.h
-- Looking for include file pthread.h - found
-- Looking for pthread_create
-- Looking for pthread_create - not found
-- Looking for pthread_create in pthreads
-- Looking for pthread_create in pthreads - not found
-- Looking for pthread_create in pthread
-- Looking for pthread_create in pthread - found
-- Found Threads: TRUE
Checking for ROHC
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.28")
-- checking for module 'rohc'
-- found rohc, version 1.7.0
-- Found ROHC: 1.7.0
-- Looking for rohc_compress2 in rohc_comp
-- Looking for rohc_compress2 in rohc_comp - found
Checking for libnetlink
-- Header libnetlink.h found at /usr/include/libnetlink.h
-- Performing Test NEW_RTNL
-- Performing Test NEW_RTNL - Success
-- Using new rtnl_talk prototype
Checking for collectd
-- Stats with collectd disabled
Checking for GnuTLS
-- checking for module 'gnutls'
-- found gnutls, version 2.12.23
-- Found GnuTLS: /usr/lib/libgnutls.so
Checking for threads
Checking for GnuTLS
Checking for libyaml
-- Found components for YAML
-- YAML_ROOT_DIR = /usr
-- YAML_INCLUDES = /usr/include
-- YAML_LIBRARIES = /usr/lib/libyaml.so
Stats with collectd disabled
-- Configuring done
-- Generating done
-- Build files have been written to: /tmp/bug1294479/iprohc-0.7.1
$ make all
Scanning dependencies of target iprohc_common
[ 9%] Building C object common/CMakeFiles/iprohc_common.dir/rohc_tunnel.c.o
[ 18%] Building C object common/CMakeFiles/iprohc_common.dir/tun_helpers.c.o
[ 27%] Building C object common/CMakeFiles/iprohc_common.dir/tlv.c.o
Linking C shared library libiprohc_common.so
[ 27%] Built target iprohc_common
Scanning dependencies of target iprohc_client
[ 36%] Building C object client/CMakeFiles/iprohc_client.dir/client.c.o
[ 45%] Building C object client/CMakeFiles/iprohc_client.dir/messages.c.o
[ 54%] Building C object client/CMakeFiles/iprohc_client.dir/tls.c.o
Linking C executable iprohc_client
[ 54%] Built target iprohc_client
Scanning dependencies of target iprohc_server
[ 63%] Building C object server/CMakeFiles/iprohc_server.dir/server.c.o
[ 72%] Building C object server/CMakeFiles/iprohc_server.dir/client.c.o
[ 81%] Building C object server/CMakeFiles/iprohc_server.dir/messages.c.o
[ 90%] Building C object server/CMakeFiles/iprohc_server.dir/tls.c.o
[100%] Building C object server/CMakeFiles/iprohc_server.dir/config.c.o
Linking C executable iprohc_server
[100%] Built target iprohc_server
$ su -
(type your root password)
# cd /tmp/bug1294479/iprohc-0.7.1
# make install
...

[Ashok Kumar (ashokkm-9)]

Also this erorr :'(...

bcg@BCGA53:~$ ip -4 address show iprohc_client
Device "iprohc_client" does not exist.

How to clear this one.. Help Didier.. Thanks

Regards,
Ashok

[Didier Barvaux (didier-barvaux)]

* Did you run this command on the computer where the IP/ROHC client was started? If no, type it on the other computer or change the interface name for the server interface (tun_ipip).
* Is the IP/ROHC client started? If no, the interface doesn't exist yet.
* Is the interface named 'iprohc_client' ? Check the interface name specified
   with the -i or --dev option when you started the client.