Bad certificate error code:0x8041012a

[shashenli]

hello i need some help would u pls help me? thank u. i use self signed certificate on server and i have already added the CA root certificate in Windows certMgr's trusted root signing certificate but still 0x8041012a i dont know why

[shashenli]

and thats how i do everything details
1.use openssl to make CA certificate privkey and server certificate privkey
(1)openssl genrsa -out rootCA.key 2048
(2)openssl req -x509 -new -nodes -key rootCA.key -subj "/CN=.tunnel.tonybai.com" -days 5000 -out rootCA.pem
(3)openssl genrsa -out device.key 2048
(4)openssl req -new -key device.key -subj "/CN=.tunnel.tonybai.com" -out device.csr
(5)openssl x509 -req -in device.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out device.crt -days 5000
2.added CA certificate in Windows certMgr's trusted root signing certificate
3.use quicsample to test if it worked
server parameters:-server -cert_file:./key/device.crt -key_file:./key/device.key
client parameters:-client -target:127.0.0.1
error code:Shut down by transport, 0x8041012a

[shashenli]

maybe this is a bug? im not sure. hope u could answer me thank u

Did you put the certificate in the server's Root CA certificate store or the client's? If needs to be installed where the validation is performed (on the client). If it is on the client, the easiest way I know to manually validate the server's certificate is to simply double click the file on Windows to open up the certificate manager for it. Go through the details to see if it shows everything as valid.

[nibanks]

Can you post a picture when you open the certificate in Windows, showing it is completely valid? I'm not sure what problem you're having exactly. Our team isn't certificate experts.

[shashenli]

i from china so thats all Chinese but u could still see that my cert is working fine

Can you post a picture when you open the certificate in Windows, showing it is completely valid? I'm not sure what problem you're having exactly. Our team isn't certificate experts.

[nibanks]

@anrossi any ideas

[shashenli]

and in another q&a the person asking the question also said that client on windows will not load cert which installed in OS
#2991 (reply in thread)