Hi, I'm trying to upgrade to 0.9.7i (at this time we can't go to 0.9.8). If I try and connect to a server and the client has a root CA that is different that the server I'm getting the following core dump in the client code:
#0  0x081adeac in ?? ()
(gdb) up
#1 0x08088692 in BIO_ctrl (b=0x819a548, cmd=7, larg=0, parg=0x0) at bio_lib.c:324
324             ret=b->method->ctrl(b,cmd,larg,parg);
(gdb) where
#0  0x081adeac in ?? ()
#1 0x08088692 in BIO_ctrl (b=0x819a548, cmd=7, larg=0, parg=0x0) at bio_lib.c:324 #2 0x0808b20c in buffer_ctrl (b=0x819b268, cmd=7, num=0, ptr=0x0) at bf_buff.c:432 #3 0x08088692 in BIO_ctrl (b=0x819b268, cmd=7, larg=0, parg=0x0) at bio_lib.c:324
#4  0x080886bd in BIO_pop (b=0x819b268) at bio_lib.c:398
#5  0x08067a4e in SSL_free (s=0x819ae10) at ssl_lib.c:441

The application is running with non-blocking turned on.
I'm getting the following error:
Error 19:self signed certificate in certificate chain

The code looks something like:
if ((ret == SSL_connect(ssl)) <= 0)
{
     if ( /* check if time out occurred, if so deal with it */)
     {
                  ...
     }
else {
                       BIO_free(conn);
SSL_free(ssl); /* This frees the underlying connection BIOs */
                       connection->conn = NULL;
       }
}


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to