Re: Adding client peer verification to my server

2014-07-26 Thread Marco Bambini
Hello, even after adding: SSL_CTX_set_client_CA_list(CTX, SSL_CTX_load_client_CA_file("/path/to/CAcerts.pem")); (please note that SSL_CTX_load_client_CA_file returns no error) I continue to receive: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned:/SourceCache/Ope

RE: Adding client peer verification to my server

2014-07-26 Thread Michael Wojcik
Reduce the problem space. Try to connect to your server with openssl s_client, and to connect your client to openssl s_server. Incidentally, in your original note you describe a "root CA" and a "server CA". Why are you using an intermediate issuing certificate? It's a lot simpler to have your s

OpenSSL FIPS 140-2 Compliant

2014-07-26 Thread pbarton
I am attempting to compile a current version of OpenVPN against an OpenSSL-1.0.1h source that I compiled calling the OpenSSL-fips-2.0.5 module. I created libssl.a and libcrypto.a and I have been trying, unsuccessfully, to compile the OpenVPN-2.3.4 calling these libraries. I am far from an expert in

Re: Adding client peer verification to my server

2014-07-26 Thread Marco Bambini
Hello, even after adding: SSL_CTX_set_client_CA_list(CTX, SSL_CTX_load_client_CA_file("/path/to/CAcerts.pem")); (please note that SSL_CTX_load_client_CA_file returns no error) I continue to receive: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned:/SourceCache/Ope