"Chen, Qiming" <[EMAIL PROTECTED]> writes:
> Hi, when I use ssldump to watch my server and client communication in linux,
> client sent certificate to server, but server always said: bad certificate.
> Anyone know how do I make a client certificate that server will accept?
> Thanks a lot!
You need to find out why the server doesn't like your certificate.
The only surefire way is to ask the server--look in the logs or
ask whoever runs the server. That said, here are some simple
things to look for:
(1) who signed your client certificate. Do you know the server
supports that CA?
(2) Is your certificate valid (not pending and not expired...)?
-Ekr
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]