I just want to wrap up my problem so that others can learn from my
ignorance:
Squid's logs aren't very verbose, so I only got "SSL unknown certificate
error 12" , when it suddenly wouldn't accept my client certificates
anymore.
That's the same error you get when a certificate has expired.
But
I probably shouldn't have posted so hastily.
Now I think that it it more of a squid problem, because if I put stunnel
in front of it, stunnel handels the certificates fine.
pfSense 2.0.1 (FreeBSD 8.1-RELEASE-p6)stunnel-4.35 openssl-1.0.0_5
__
> From: [EMAIL PROTECTED] On Behalf Of Felix Ingram
> Sent: Saturday, 04 October, 2008 10:27
> 2008/10/4 Dave Thompson <[EMAIL PROTECTED]>:
> > The actual failure is the alert 48 "unknown ca" from the server.
> > Apparently it doesn't like the cert (or chain) s_client is sending,
> > but the prot
Hi Dave,
2008/10/4 Dave Thompson <[EMAIL PROTECTED]>:
>> From: [EMAIL PROTECTED] On Behalf Of Felix Ingram
>> Sent: Tuesday, 30 September, 2008 10:08
>
>> I'm having a little trouble testing out some web services for a
>> client. They have provided us with a couple of pfx certificate files
>> to a
> From: [EMAIL PROTECTED] On Behalf Of Felix Ingram
> Sent: Tuesday, 30 September, 2008 10:08
> I'm having a little trouble testing out some web services for a
> client. They have provided us with a couple of pfx certificate files
> to allow us to authenticate to their web servers.
> openssl s_cl
Hi Felix
Felix Ingram wrote:
> 2008/10/1 vinni rathore <[EMAIL PROTECTED]>:
>> Hello,
>>
>> As your problem says that you are getting "local issuer certificate"
>> problem that means that client certificate is signed with a particular
>> CA certificate and that certificate is not found at the time
2008/10/1 vinni rathore <[EMAIL PROTECTED]>:
> Hello,
>
> As your problem says that you are getting "local issuer certificate"
> problem that means that client certificate is signed with a particular
> CA certificate and that certificate is not found at the time of
> Handshaking.. so please confirm
ok never mind, got it working. My server certificate had expired.
Thanks for all your help.
Stella
On Wed, Nov 12, 2003 at 01:23:15PM +, Stella Power wrote:
> ok I think I figured out one problem - the client side was using a cert
> signed with a password protected key, which my script was u
ok I think I figured out one problem - the client side was using a cert
signed with a password protected key, which my script was unable to deal
with. Having fixed that, I am now getting error
140890B2 : SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
on the server side.
and e
s-delegation-00.txt
Later,
derek
:
:- Original Message -
:From: "Derek.Browne" <[EMAIL PROTECTED]>
:To: <[EMAIL PROTECTED]>
:Sent: Sunday, March 11, 2001 3:48 AM
:Subject: RE: Client certificates: Key store per workstation, not per user?
:
:
:> Hi,
:>
:> This i
ucture bit of PKI At
the moment I'm inclined to think that no-one shares certs and we all become
our own root CA!!!
- Original Message -
From: "Derek.Browne" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, March 11, 2001 3:48 AM
Subject: RE: Client ce
: Saturday, March 10, 2001 2:58 AM
::To: [EMAIL PROTECTED]
::Subject: Re: Client certificates: Key store per workstation, not per
::user?
::
::
::So users sharing passwords are at least limited to within an organisation.
::Sounds perfectly reasonable.
::
::I don't know the ins and outs of your client
: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, March 10, 2001 4:55 AM
Subject: RE: Client certificates: Key store per workstation, not per user?
> I need to use the client certificates with IE. I will have a look into the
> crypte API.
>
> Thanks
> raine
I need to use the client certificates with IE. I will have a look into the
crypte API.
Thanks
rainer
-Original Message-
From: Greg Stark [mailto:[EMAIL PROTECTED]]
Sent: Freitag, 9. März 2001 18:34
To: [EMAIL PROTECTED]
Subject: Re: Client certificates: Key store per workstation, not
- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 09, 2001 10:56 AM
Subject: RE: Client certificates: Key store per workstation, not per user?
> My project is a inter-government project over the internet, with 2400
> independent
files\all
users\keystorefile".
I would like to your opinion
Rainer
-Original Message-
From: bruce cartland [mailto:[EMAIL PROTECTED]]
Sent: Freitag, 9. März 2001 14:50
To: [EMAIL PROTECTED]
Subject: Re: Client certificates: Key store per workstation, not per
user?
I thought Kerberos was sym
On Wed, Feb 14, 2001 at 09:24:46PM +, Tim Small wrote:
> I'm wondering if anyone can shed any light on a problem I'm having with
> Outlook Express? Apologies for posting a load of debug output to the
> list, but I didn't really know what was safe to omit.
>
> I'm trying to setup secure IMA
17 matches
Mail list logo