Re: [openssl-1.1.1l] TLS1.2 Server responses with Alert

2021-12-31 Thread Mark Hack
The server error is correct - the signature_algorithms_cert extension does not offer rsa_pkcs1_sha256 (0x0401) which is the server certificate signing algorithm. If the client is written in Java, check java.security for "jdk.certpath.disabledAlgorithms" and check the constraints. On Fri, 2021-

RE: [openssl-1.1.1l] TLS1.2 Server responses with Alert

2021-12-31 Thread Michael Wojcik
> From: openssl-users On Behalf Of Ma > Zhenhua > Sent: Thursday, 30 December, 2021 23:59 > On the SSL/TLS server, there's one error as follows. > "SSL Error(118) - no suitable signature algorithm" Debugging handshake failures isn't my area of expertise, but I note both ClientHellos include a

回复: [openssl-1.1.1l] TLS1.2 Server responses with Alert

2021-12-30 Thread Ma Zhenhua
31 收件人: openssl-...@openssl.org ; openssl-users@openssl.org 主题: [openssl-1.1.1l] TLS1.2 Server responses with Alert Hi Team, I have 2 clients trying to access the same TLS server, one is successful, while the other fails. I've done some research but still have no idea. Could someone

[openssl-1.1.1l] TLS1.2 Server responses with Alert

2021-12-30 Thread Ma Zhenhua
Hi Team, I have 2 clients trying to access the same TLS server, one is successful, while the other fails. I've done some research but still have no idea. Could someone please give me some suggestions? Many thanks in advance. Failed one: TLSv1.2 Record Layer: Handshake Protocol: Client Hello