marck@woozle:~> openssl s_client -connect smtp.yandex.ru:25 -starttls smtp CONNECTED(00000003) depth=0 /C=RU/2.5.4.17=111033/ST=Russian Federation/L=Moscow/2.5.4.9=MOSCOW/2.5.4.9=Samokatnaya 1 bldg 21/O=OOO Yandex/OU=NOC/OU=EliteSSL/CN=smtp.yandex.ru verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 /C=RU/2.5.4.17=111033/ST=Russian Federation/L=Moscow/2.5.4.9=MOSCOW/2.5.4.9=Samokatnaya 1 bldg 21/O=OOO Yandex/OU=NOC/OU=EliteSSL/CN=smtp.yandex.ru verify error:num=27:certificate not trusted verify return:1 depth=0 /C=RU/2.5.4.17=111033/ST=Russian Federation/L=Moscow/2.5.4.9=MOSCOW/2.5.4.9=Samokatnaya 1 bldg 21/O=OOO Yandex/OU=NOC/OU=EliteSSL/CN=smtp.yandex.ru verify error:num=21:unable to verify the first certificate verify return:1 --- Certificate chain 0 s:/C=RU/2.5.4.17=111033/ST=Russian Federation/L=Moscow/2.5.4.9=MOSCOW/2.5.4.9=Samokatnaya 1 bldg 21/O=OOO Yandex/OU=NOC/OU=EliteSSL/CN=smtp.yandex.ru i:/C=GB/O=Comodo Limited/OU=Comodo Trust Network/OU=Terms and Conditions of use: http://www.comodo.net/repository/OU=(c)2002 Comodo Limited/CN=Comodo Class 3 Security Services CA
no subject
Я к тому, что цепочки проверять надо разрешать отдельно.