Re: [openssl-users] MTLS verification fails

2018-03-04 Thread Kyle Hamilton
> #$ openssl s_server -key privkey.pem -cert server.pem -accept 8446 -verify > ca.pem Change the '-verify' to '-CAfile' and it might work. -Kyle H On Sun, Mar 4, 2018 at 9:58 PM, salil GK wrote: > > #$ openssl s_client -cert tomcat.pem -key tomcat_priv.pem -CAfile > ca.pem -connect lrc1

Re: [openssl-users] MTLS verification fails

2018-03-04 Thread Viktor Dukhovni
> On Mar 5, 2018, at 12:58 AM, salil GK wrote: > > openssl s_client -cert tomcat.pem -key tomcat_priv.pem -CAfile ca.pem > -connect lrc1.cisco.com:8446 > > - > > #$ openssl s_server -key privkey.pem -cert server.pem -accept 8446 > -verify ca.pem > veri

[openssl-users] MTLS verification fails

2018-03-04 Thread salil GK
Hi I am new to certificate management domain. We have a MTLS server. I am trying to debug the issues between the certificate validation between client and server. I used openssl s_client and s_server command to verify if the certificates are in good shape. But while doing so - I am getting