Hello,

I m writing a web server and I need to add the SSL stack. So, I looked
to the serv.cpp example and tried to modify it to my need. And if I m
using the foo-cert.pem file given with the example, I can connect with a
web browser (netscape) with no problem, the certificate is downloaded
and the communication between the client and the server is correct. But
now, I m would like to do my own certificate (with the name of my
company, etc ...) but it doesn t work.
What I did:
- I ve created a new root certificate
- I ve created a new server certificate and signed it
- I ve created a new user certificate and signed it
- exported the file in pkcs12 format

Now I have the .p12 file which I can import directly in my browser
(import certificate).

But now what should I do ?
I don t have any .pem file with my private key or certificate for the
server. How to get one like in the example ?
I ve tried to save my certificate and private key in 2 .pem files (just
copying them) but when I try to connect to my server I get the following
error:

23307:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared
cipher:s3_srvr.c:772:

The two API functions I m using are:
SSL_CTX_use_certificate_file
SSL_CTX_use_PrivateKey_file

which use .pem files.

Any help ?

Thanks a lot

Stephane

ps: and an other question, how to import directly the certificate in the
browser at the first connection ? (without importing it manually)
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to