Hi 
I am having trouble adding a cert file to a new SSL
context 
=========== This is what I do ==========
 SSL_CTX *nctx = SSL_CTX_new(....);

     if (!SSL_CTX_use_certificate_chain_file(nctx,
pSecId->certFileName)) {
        log(LOG_ERR, ": Error reading certificate
file: %s", pSecId->certFileName);
        sslerror_stack();
        return (FAILURE);
      }
======= This is what i get ===========
error stack: B07C065 : error:0B07C065:x509 certificate
routines:X509_STORE_add_cert:cert already in hash
table
error stack: B07C065 : error:0B07C065:x509 certificate
routines:X509_STORE_add_cert:cert already in hash
table

=========================================

Note that I have a perfectly valid certificate file.
Most of the time I have no problem adding the
certificate to the new context (running the same
executable code as above). In my executable I create
multiple SSL_CTX all of which may use the same
certificate file but different poilicies of timeout
etc. Only occassionally, initialization of one of
those contexts is failing due to above problem. I am
strongly suspecting SSL_CTX_new() is returning me an
X509 store which is un-initialized (malloc picking up
the old copy of the store etc). The suspision is even
thicker since I see this problem only on a system with
lesser memory (512MB v/s 4GB) running lots of java.


Will greatly appreciate any help on this issue.



-Aniruddha


=====

Aniruddha C. Chiplunkar
 Phone (408) 774 1201



                
_______________________________
Do you Yahoo!?
Declare Yourself - Register online to vote today!
http://vote.yahoo.com
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to