Re: Re: client certificates suddenly not accepted anymore: squid: SSL unknown certificate error 12 -> User error, not a library error

2012-03-06 Thread Marcus . Daniel
I just want to wrap up my problem so that others can learn from my ignorance: Squid's logs aren't very verbose, so I only got "SSL unknown certificate error 12" , when it suddenly wouldn't accept my client certificates anymore. That's the same error you get when a certificate has expired. But

Re: client certificates suddenly not accepted anymore: squid: SSL unknown certificate error 12

2012-03-05 Thread Marcus . Daniel
I probably shouldn't have posted so hastily. Now I think that it it more of a squid problem, because if I put stunnel in front of it, stunnel handels the certificates fine. pfSense 2.0.1 (FreeBSD 8.1-RELEASE-p6)stunnel-4.35 openssl-1.0.0_5 __

RE: Client Certificates

2008-10-07 Thread Dave Thompson
> From: [EMAIL PROTECTED] On Behalf Of Felix Ingram > Sent: Saturday, 04 October, 2008 10:27 > 2008/10/4 Dave Thompson <[EMAIL PROTECTED]>: > > The actual failure is the alert 48 "unknown ca" from the server. > > Apparently it doesn't like the cert (or chain) s_client is sending, > > but the prot

Re: Client Certificates

2008-10-04 Thread Felix Ingram
Hi Dave, 2008/10/4 Dave Thompson <[EMAIL PROTECTED]>: >> From: [EMAIL PROTECTED] On Behalf Of Felix Ingram >> Sent: Tuesday, 30 September, 2008 10:08 > >> I'm having a little trouble testing out some web services for a >> client. They have provided us with a couple of pfx certificate files >> to a

RE: Client Certificates

2008-10-04 Thread Dave Thompson
> From: [EMAIL PROTECTED] On Behalf Of Felix Ingram > Sent: Tuesday, 30 September, 2008 10:08 > I'm having a little trouble testing out some web services for a > client. They have provided us with a couple of pfx certificate files > to allow us to authenticate to their web servers. > openssl s_cl

Re: Client Certificates

2008-10-01 Thread Patrick Patterson
Hi Felix Felix Ingram wrote: > 2008/10/1 vinni rathore <[EMAIL PROTECTED]>: >> Hello, >> >> As your problem says that you are getting "local issuer certificate" >> problem that means that client certificate is signed with a particular >> CA certificate and that certificate is not found at the time

Re: Client Certificates

2008-10-01 Thread Felix Ingram
2008/10/1 vinni rathore <[EMAIL PROTECTED]>: > Hello, > > As your problem says that you are getting "local issuer certificate" > problem that means that client certificate is signed with a particular > CA certificate and that certificate is not found at the time of > Handshaking.. so please confirm

Re: client certificates and Net::SSLeay

2003-11-12 Thread Stella Power
ok never mind, got it working. My server certificate had expired. Thanks for all your help. Stella On Wed, Nov 12, 2003 at 01:23:15PM +, Stella Power wrote: > ok I think I figured out one problem - the client side was using a cert > signed with a password protected key, which my script was u

Re: client certificates and Net::SSLeay

2003-11-12 Thread Stella Power
ok I think I figured out one problem - the client side was using a cert signed with a password protected key, which my script was unable to deal with. Having fixed that, I am now getting error 140890B2 : SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned on the server side. and e

Re: Client certificates: Key store per workstation, not per user?

2001-03-10 Thread Dj Browne
s-delegation-00.txt Later, derek : :- Original Message - :From: "Derek.Browne" <[EMAIL PROTECTED]> :To: <[EMAIL PROTECTED]> :Sent: Sunday, March 11, 2001 3:48 AM :Subject: RE: Client certificates: Key store per workstation, not per user? : : :> Hi, :> :> This i

Re: Client certificates: Key store per workstation, not per user?

2001-03-10 Thread bruce cartland
ucture bit of PKI At the moment I'm inclined to think that no-one shares certs and we all become our own root CA!!! - Original Message - From: "Derek.Browne" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, March 11, 2001 3:48 AM Subject: RE: Client ce

RE: Client certificates: Key store per workstation, not per user?

2001-03-10 Thread Derek.Browne
: Saturday, March 10, 2001 2:58 AM ::To: [EMAIL PROTECTED] ::Subject: Re: Client certificates: Key store per workstation, not per ::user? :: :: ::So users sharing passwords are at least limited to within an organisation. ::Sounds perfectly reasonable. :: ::I don't know the ins and outs of your client

Re: Client certificates: Key store per workstation, not per user?

2001-03-09 Thread bruce cartland
: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, March 10, 2001 4:55 AM Subject: RE: Client certificates: Key store per workstation, not per user? > I need to use the client certificates with IE. I will have a look into the > crypte API. > > Thanks > raine

RE: Client certificates: Key store per workstation, not per user?

2001-03-09 Thread Rainer . Hoerbe
I need to use the client certificates with IE. I will have a look into the crypte API. Thanks rainer -Original Message- From: Greg Stark [mailto:[EMAIL PROTECTED]] Sent: Freitag, 9. März 2001 18:34 To: [EMAIL PROTECTED] Subject: Re: Client certificates: Key store per workstation, not

Re: Client certificates: Key store per workstation, not per user?

2001-03-09 Thread Greg Stark
- Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, March 09, 2001 10:56 AM Subject: RE: Client certificates: Key store per workstation, not per user? > My project is a inter-government project over the internet, with 2400 > independent

RE: Client certificates: Key store per workstation, not per user?

2001-03-09 Thread Rainer . Hoerbe
files\all users\keystorefile". I would like to your opinion Rainer -Original Message- From: bruce cartland [mailto:[EMAIL PROTECTED]] Sent: Freitag, 9. März 2001 14:50 To: [EMAIL PROTECTED] Subject: Re: Client certificates: Key store per workstation, not per user? I thought Kerberos was sym

Re: Client certificates from private CA, with Outlook or Outlook Express

2001-02-14 Thread Lutz Jaenicke
On Wed, Feb 14, 2001 at 09:24:46PM +, Tim Small wrote: > I'm wondering if anyone can shed any light on a problem I'm having with > Outlook Express? Apologies for posting a load of debug output to the > list, but I didn't really know what was safe to omit. > > I'm trying to setup secure IMA