I belive the certificate does not match your post location. (i.e. in a
browser when you go to https://www.netplaza.com the browser complains that
the certificate does not match the DNS of the machine and asks if you want
to continue. The cert is for netplaza.com. The certs are generally for
specific machines, not entire domains.

I think the same thing is happening on your command line binary, but it does
not allow you to continue as it connot verify authenticity based on DNS. I
do not know if there is a flag to disable and allow pass through, I would
think so.

Hope this helps.

-Dean

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of H. Jean Oh
> Sent: Wednesday, March 10, 1999 6:41 PM
> To: [EMAIL PROTECTED]
> Subject: HELP! s_client
>
>
>
> Greetings,
>
> I'm trying to use SSL to access secure web sites(https) and what I am
> trying to do is not much more than what s_client is supposed to do  --
> sends "GET / HTTP/1.0\n\n" request and receives the HTML page. I
> installed Eric Young's SSLeay and tried to use s_client in the demo
> package. Instead of HTML page, I got the following error. Could anyone
> tell me what I am missing? A big thanks in advance!
>
> echo "GET /" | s_client -connect www.netplaza.com:443
> CONNECTED(00000004)
> depth=0 /C=US/ST=New Hampshire/L=Hampton/O=Receptive Marketing
> Inc./CN=netplaza.com
> verify error:num=20:unable to get local issuer certificate
> verify return:1
> depth=0 /C=US/ST=New Hampshire/L=Hampton/O=Receptive Marketing
> Inc./CN=netplaza.com
> verify error:num=21:unable to verify the first certificate
> verify return:1
> 4080:error:140790E3:SSL routines:SSL23_WRITE:ssl handshake
> failure:s23_lib.c:224:
>
> -----
> Jean
> [EMAIL PROTECTED]
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to