I captured the debug output using same values for CAfile, key and cert to a tomcat server with TLS enabled.
http://pastebin.com/hAqK2rGM The error with both OpenSSL 1.0.0e 6 Sep 2011 and OpenSSL 1.0.1c 10 May 2012 is: 3076311816:error:14094438:SSL routines:SSL3_READ_BYTES:tlsv1 alert internal error:s3_pkt.c:1251:SSL alert number 80 3076311816:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:592: Both OpenSSL 0.9.8k 25 Mar 2009 on FreeBSD and OpenSSL 0.9.8r 8 Feb 2011 on OSX work fine with this server. I am not even sure what to try here but the server is Apache Tomcat/6.0.28, the server.xml has the following conf: <Connector executor="tomcatThreadPool" port="8443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" keystoreFile="conf/ssl.p12" keystorePass="<keyStorePassword>" keystoreType="PKCS12" truststoreFile="conf/truststore.jks" truststorePass="<trustStorePassword" truststoreType="JKS" clientAuth="true" sslProtocol="TLS" /> TIA for any suggestions r ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org