Hi Michael,
Thanks for your response.
You are correct the server is not set up for  client authentication.

It is server only authentication. What do I need to do on the client to get
this to work?

Do I need a KEYFILE + Password on the client? 

    ctx=initialize_ctx(KEYFILE,PASSWORD);

Do I need to add the server CA to the clients list of trusted CA's?

I am new to SSL and I am getting confused
any help is appreciated.

Regards,
Aoife.
-----Original Message-----
From: Michael Sierchio [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 25, 2002 11:13 AM
To: [EMAIL PROTECTED]
Subject: Re: Client certificate verification


Sharkey, Aoife wrote:
> Hi
> 
> I am having aproblem where the server is unable to verify the client
> certificate I created.
> The Server is running IIS and is listening on port 443 for SSL traffic.
> 
> 
>>here is an example of the ssldump file

I didn't see anything here that suggests that the server is requesting
client auth.  There was apparently no 'Certificate request' component
to the handshake, in which the server enumerates the DNs of acceptable
CAs and client cert types.  I'd conclude that the server isn't
configured to need client auth.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

This e-mail and any attachment is for authorised use by the intended recipient(s) 
only.  It may contain proprietary material, confidential information and/or be subject 
to legal privilege.  It should not be copied, disclosed to, retained or used by, any 
other party.  If you are not an intended recipient then please promptly delete this 
e-mail and any attachment and all copies and inform the sender.  Thank you.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to