RE: Adding client peer verification to my server

2014-07-28 Thread Dave Thompson
the client side. From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Michael Wojcik Sent: Friday, July 25, 2014 12:44 To: openssl-users@openssl.org Subject: [SPAM?] RE: Adding client peer verification to my server Unless I've overlooked it, you don&#x

RE: Adding client peer verification to my server

2014-07-28 Thread Dave Thompson
truststore and to set client-ca-list. From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Marco Bambini Sent: Sunday, July 27, 2014 13:33 To: openssl-users@openssl.org Subject: Re: Adding client peer verification to my server Hello, thanks to

Re: Adding client peer verification to my server

2014-07-27 Thread Marco Bambini
> don't need an intermediate for some reason. > > Michael Wojcik > Technology Specialist, Micro Focus > > > From: owner-openssl-us...@openssl.org > [mailto:owner-openssl-us...@openssl.org] On Behalf Of Marco Bambini > Sent: Saturday, 26 July, 2014 04:26 > To: ope

Re: Adding client peer verification to my server

2014-07-27 Thread Marco Bambini
> don't need an intermediate for some reason. > > Michael Wojcik > Technology Specialist, Micro Focus > > > From: owner-openssl-us...@openssl.org > [mailto:owner-openssl-us...@openssl.org] On Behalf Of Marco Bambini > Sent: Saturday, 26 July, 2014 04:26 > To: ope

Re: Adding client peer verification to my server

2014-07-26 Thread Marco Bambini
Hello, even after adding: SSL_CTX_set_client_CA_list(CTX, SSL_CTX_load_client_CA_file("/path/to/CAcerts.pem")); (please note that SSL_CTX_load_client_CA_file returns no error) I continue to receive: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned:/SourceCache/Ope

RE: Adding client peer verification to my server

2014-07-26 Thread Michael Wojcik
turday, 26 July, 2014 04:26 To: openssl-users@openssl.org Subject: Re: Adding client peer verification to my server Hello, even after adding: SSL_CTX_set_client_CA_list(CTX, SSL_CTX_load_client_CA_file("/path/to/CAcerts.pem")); (please note that SSL_CTX_load_client_CA_file returns no error

Re: Adding client peer verification to my server

2014-07-26 Thread Marco Bambini
Hello, even after adding: SSL_CTX_set_client_CA_list(CTX, SSL_CTX_load_client_CA_file("/path/to/CAcerts.pem")); (please note that SSL_CTX_load_client_CA_file returns no error) I continue to receive: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned:/SourceCache/Ope

RE: Adding client peer verification to my server

2014-07-25 Thread Michael Wojcik
Unless I've overlooked it, you don't appear to be calling SSL_CTX_set_client_CA_list or SSL_CTX_add_client_CA anywhere. When an SSL/TLS server wants to request a peer certificate, it has to send a list of the CAs it recognizes to the client, so the client knows which certificate to send. (The c