Hi,

As I wrote to this list before, I have a problem with running a program
built on Irix which does not occur on other platforms using exactly the
same code. I hereby provide some more diagnostic information I found
recently, in the hope that someone has a clue on what is happening and
how to address this problem.

The problem seems to be with the client side of the SSL handshake routine
(either called using SSL_do_handshake in client mode or by using
SSL_connect). The server works fine also when compiled on irix. The irix
program uses (home-compiled) OpenSSL version 0.9.6i and 0.9.7c.

Independent of which platform the server is running, when the Irix client
connects to it, the server (compiled with 0.9.6 libs) handshake reports:
SSL_do_handshake returned 0
SSL_get_error error code: 5
error:00000005:lib(0):func(0):bad asn1 object header

This error does not occur when the client is compiled on solaris or linux;
in this case, the handshake succeeds, also for example when a solaris
client interoperates with the irix server.

After recompilation of the (server) program using 0.9.7c, the problem
reported by the server was different, somehow:

SSL_do_handshake returned 0
SSL_get_error error code: 1
error:00000001:lib(0):func(0):reason(1)
The 0.9.7.c irix client interoperating with a server on solaris that was
built using 0.9.6 libraries reported reason 5 again.

So, the difference in error report seem to be server side library
version based; the client side causes an error independent of the library
version used, but it is named differently by different openssl
versions. I am not sure what really happens internally in openssl, I find
it hard to trace the error back in the code.

Does anyone have an idea what might be handled differently in the Irix
version of the libraries than the solaris / linux version with regard to
the handshake protocol? Or maybe something different happens in the
underlying socket implementation in Irix or something like that which
might cause these problems?

What sort of thing can cause the above problems? Is there anything I might
be doing wrong in the application code that can cause this?

Thanks for reading,

Guido.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to