I have a couple of problems. Background: I've written
a library, T, which (among other things) provides TLS
functionality, using OpenSSL. I've also written a test
application, U, which uses OpenSSL on one side and
T's interface on the other side, to set up TLS
connections and exchange data.

Pretty much all my OpenSSL related code is derived
from the OpenSSL book, as are the certificates being
used.

This code works correctly on Solaris, Linux and
Windows NT. On VxWorks, however, I get the evil
ssl3 alert bad certificate when using SSL_connect()
from my dummy client to connect to a server that
was established through the library.

Barring changes relating to the operating system
interface and cross compilation, the code is identical.
So are the certificates I am using.

Further: there is another application V, which uses T.
V has been modified to establish TLS connections
through T, and is configuring T for this purpose
identically to U. However, V fails during this
configuration (unlike U) when the library calls
SSL_CTX_load_verify_locations().

The error stack reports a pem_read error, saying there
is no beginning line. But V is using the exact same
certificate files as U. Even more bafflingly, the calls
SSL_CTX_use_certificate_chain_file() and
SSL_CTX_use_Privatekey_file() succeed. Only the CA file
is causing trouble.

Any solutions will be gratefully received. Any
suggestions are very welcome. I'm completely open to
ideas, as I'm out of them. 

Thanks.


K

-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to