Whew, built finally. Looks like there was a mistake first time..

Ok, all works :)

Thank you !


Andrejs


Andrejs Igumenovs wrote:

Seems I didn't set it properly.. How do I build with 'no-tlsext' ?

Thank you !


Andrejs Igumenovs wrote:

No, 'no-tlsext' option doesn't help..


Dave Thompson wrote:
From: owner-openssl-us...@openssl.org On Behalf Of Andrejs Igumenovs
Sent: Monday, 03 August, 2009 07:08
<snip: connect over bio connect>
This succeed with "ssleay32.dll v0.9.8.4" and it fails with "ssleay32.dll v0.9.8.11".

2009-08-03 13:40:25,911 DEBUG [org.apache.tomcat.util.net.PoolTcpEndpoint] Handshake failed
javax.net.ssl.SSLException: Unexpected end of handshake data

What could be the reason and where should I dig into ?


0.9.8j (and thus k) enabled extensions by default, one of which changes the ClientHello in a fashion that Java (perhaps some versions and/or providers) doesn't understand. To disable on the OpenSSL side, either build with no-tlsext or SSL_[CTX_]set_option of (or including) SSL_OP_NO_TICKET .

To enable on the Java side, I can't help you.



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to