Certificate chain not signed by any trustedroots

[zubfatal]

It seems the configuration needs one or more values in login -> certificationDigests but I can't seem to find any mention of this in the README file - where do I obtain this value?

[Kodzila]

Hello @zubfatal I'm on the same page as you are and managed to get through this issue.

You need to go to this page:
https://www.nets.eu/dk-da/kundeservice/NemID-Til-Private/Pages/Repository.aspx
and download root certificate.

Then in the code you can calculate fingerprint and push to certificationDigests:

$root = file_get_contents(__DIR__ . '/../certs/root.crt');
$config['login']['certificationDigests'][] = hash('sha256', $root);

This is how to configure it for production. For test I could not find relevant certificate, only ready sha256 signature:
0e2fd1fda36a4bf3995e28619704d60e3382c91e44a2b458ab891316380b1d50

found in: https://github.com/tobandan/nemid-php/blob/master/www/index.php#L99

[zubfatal]

Thanks @Kodzila ! I will look into this. I cheated a bit a had the code output the digest hash for me - but thus far I have only tested it with the test certificates.

You can also get the test root certificate here:
https://www.nets.eu/dk-da/kundeservice/nemid-tjenesteudbyder/NemID-tjenesteudbyderpakken/Pages/OCES-II-certifikat-eksempler.aspx

Getting the digest with some extra temporary PHP code, seems like a hassle - would be nice with a different, simpler approach - maybe matching against the fingerprint of the certificate? I mean, these can be retrieved using an openssl command.