I'm trying to use IO-Socket-SSL-1.13_5, Net-SSLeay 1.32 and OpenSSL 0.9.7j.
I have the Perl module coded the following way. When $ssl_verify_mode =
0x01 to verify the peer certificate, I get the error below. I'm using the
same self-signed certificate on the server as I'm using on the client (it's
split up into CA.pem, Cert.pem, and Key.pem). I've seen a similar error
on Google where the resolution was to call SSLeay_add_ssl_algorithms().. I
did this in my application and still have the "unknown message digest
algorithm" error. Does anyone have a clue what would cause this problem?
Thanks in advance! I'll be happy to provide any additional information
needed to help resolve this.
Let me know if there's a better forum for this question.
IO::Socket::SSL->start_SSL($sock,
'SSL_version' => $ssl_ver,
'SSL_cipher_list' => $ssl_cipher_list,
'SSL_verify_mode' => hex $ssl_verify_mode,
'SSL_use_cert' => $use_cert,
'SSL_key_file' => $key_location,
'SSL_passwd_cb' => sub{return $key_pass},
'SSL_cert_file' => $cert_location,
'SSL_ca_file' => $ca_location
) || die "Encountered an SSL handshake problem:
".IO::Socket::SSL::errstr();
"Debug output"
SSL_ca_file: CA.pem
SSL_cert_file: Cert.pem
SSL_key_file: Key.pem
SSL_verify_mode: 0x01
SSL_version: TLSv1
SSL_cipher_list: ALL
SSL_use_cert: 1
"Error"
Making as SSL connection using socket GLOB(0x2659ffc).
DEBUG: .../IO/Socket/SSL.pm:1263: IO::Socket::SSL::SSL_Context
HASH(0x1cbe784)
DEBUG: .../IO/Socket/SSL.pm:1381: new ctx 29512696
SSL connect attempt failed with unknown errorerror:0D0C50A1:asn1 encoding
routines:ASN1_item_verify:unknown message digest algorithm
SSL error: 4860: 1 - error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Regards,
Pete
--
View this message in context:
http://www.nabble.com/Problem-%22unknown-message-digest-algorithm%22-verifying-server-certificate-from-Perl-OpenSSL-client-tp19112522p19112522.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
