Mike Marshall wrote:

so when a connection is accepted, here are the calls:

1)  ssl = SSL_new(ctx)
2)  BIO_new_socket
3) SSL_set_bio - called with the results of number 2
4) SSL_accept(ssl)   <-- this line fails with a code of -1
5) SSL_get_error returns error code 1
6) ERR_peek_error
7) ERR_error_string_n - this function reveals my dreaded error:

error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher

This error means that the server doesn't accept any of the cipher suites proposed by the client. Look for the cipher suites the client uses and the server accepts, e.g. look for calls of SSL_CTX_set_cipher_list or inspect the configuration options of your software.
Additionally ssldump (http://www.rtfm.com) may be helpful.
Ciao,
Richard
--
Dr. Richard W. Könning
Fujitsu Siemens Computers GmbH
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]

Reply via email to