Re: Question on SSL/TLS protocol and self-signed certificate

2006-01-20 Thread Lusiana Lusiana
On 1/20/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: > > The s_client utility is a test utility which will continue with a connection > after a certificate chain verification failure. A normal client would exit > under those circumstances. Hi Steve, Thank you very much for the prompt reply. T

Re: Question on SSL/TLS protocol and self-signed certificate

2006-01-19 Thread Dr. Stephen Henson
On Fri, Jan 20, 2006, Lusiana Lusiana wrote: > > I tried to test this using OpenSSL s_client connecting to a web server > whose certificate is self-signed. I didn't import server certificate > to the client in prior to testing this. > Therefore, I expected the session establishment would fail as

Question on SSL/TLS protocol and self-signed certificate

2006-01-19 Thread Lusiana Lusiana
Hi, I'm a newbie with SSL/TLS protocol and hoping someone can enlighten me on a few things. My understanding of the TLS protocol is the following: During a session establishment a server always transmits its certificate to the client, and the client must validate the certificate. Therefore, if th