I captured the debug output using same values for CAfile, key and cert
to a tomcat server with TLS enabled.

http://pastebin.com/hAqK2rGM

The error with both OpenSSL 1.0.0e 6 Sep 2011 and OpenSSL 1.0.1c 10 May
2012 is:

3076311816:error:14094438:SSL routines:SSL3_READ_BYTES:tlsv1 alert
internal error:s3_pkt.c:1251:SSL alert number 80
3076311816:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake
failure:s3_pkt.c:592:

Both OpenSSL 0.9.8k 25 Mar 2009 on FreeBSD and OpenSSL 0.9.8r 8 Feb 2011
on OSX work fine with this server. I am not even sure what to try here
but the server is Apache Tomcat/6.0.28, the server.xml has the following
conf:

   <Connector executor="tomcatThreadPool" port="8443"
protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               keystoreFile="conf/ssl.p12"
keystorePass="<keyStorePassword>" keystoreType="PKCS12"
               truststoreFile="conf/truststore.jks"
truststorePass="<trustStorePassword" truststoreType="JKS"
               clientAuth="true" sslProtocol="TLS" />

TIA for any suggestions

r
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to