SSL load_cert_crl_file "system lib" errors

[Steve Borho]

On Fri, Jan 21, 2011 at 3:19 PM, Philip Pemberton <lists at philpem.me.uk> wrote:
> Hi,
>
> I've just installed a StartSSL certificate on my server, mainly to get rid
> of the ever-present "SSL CA is not verified" alerts from Firefox,
> Thunderbird and Mercurial. FFX and TBird are fine with my server's new
> certificate, but Mercurial seems to have a problem...
>
> I copied StartSSL's CA key into /home/philpem/.hgfiles/cacerts.pem, then
> added this to the head of my ~/.hgrc:
>
> [web]
> cacerts = /home/philpem/.hg/cacerts.pem
>
> Now if I try to push or pull...
>
> philpem at cheetah:/var/www/isis$ hg push
> abort: error: _ssl.c:328: error:0B084002:x509 certificate
> routines:X509_load_cert_crl_file:system lib

This is OpenSSL's idea of:  Unable to parse certificate file.

-- 
Steve Borho