That was it. Works like a charm now. Thanks for your help.
>> >> I assume you mean do something like this in the Application client: >> >> ctx = SSL_CTX_new( SSLv3_server_method() ); >> >> I tried this, SSL_connect/SSL_accept returns 0, with the following >> error: >> >> 328:error:140C5022:SSL routines:SSL_UNDEFINED_FUNCTION:called a >> function you should not call:ssl_lib.c:1639: >> >> I must be missing something. My client basically does the following: >> >> SSL_library_init(); >> SSL_load_error_strings(); >> ctx = SSL_CTX_new( SSLv3_server_method() ); >> SSL_CTX_use_certificate_file( ctx, "cert", SSL_FILETYPE_PEM ) >> SSL_CTX_use_PrivateKey_file( ctx, "key", SSL_FILETYPE_PEM ) >> SSL_CTX_set_verify( ctx, ( SSL_VERIFY_NONE ), >> ssl_verify_callback ); >> SSL_CTX_set_verify_depth( ctx, 4 ); >> SSL_CTX_set_options( ctx, SSL_OP_ALL ); >> >> ...connect to port... >> >> SSL_new() >> SSL_connect( ) /* returns 0 */ > > This should be > > SSL_accept(); > >> My server process does the following: >> >> SSL_library_init(); >> SSL_load_error_strings(); >> ctx = SSL_CTX_new( SSLv3_client_method() ); >> SSL_CTX_load_verify_locations( ctx, "root.pem", NULL ) >> SSL_CTX_set_verify( ctx, ( SSL_VERIFY_NONE ), >> ssl_verify_callback ); >> SSL_CTX_set_verify_depth( ctx, 4 ); >> SSL_CTX_set_options( ctx, SSL_OP_ALL ); >> >> ...bind to port... >> >> SSL_new() >> SSL_accept( ) /* returns 0 */ > > This should be > > SSL_connect(); > > > > > Jeffrey Altman * Sr.Software Designer Kermit 95 2.0 GUI available > now!!! > The Kermit Project @ Columbia University SSH, Secure Telnet, Secure > FTP, HTTP > http://www.kermit-project.org/ Secured with MIT Kerberos, > SRP, and > [EMAIL PROTECTED] OpenSSL. > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] > > -- Brian Wotring ( [EMAIL PROTECTED] ) PGP KeyID: 0x9674763D ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
