Re: problem connecting to ssl server

2009-05-14 Thread Folkert van Heusden
> > I have an ssl server. Really simple; > > > > // init > > SSL_library_init(); > > SSL_load_error_strings(); > > bio_err = BIO_new_fp(stderr, BIO_NOCLOSE); > > meth = SSLv23_server_method(); > > ctx = SSL_CTX_new(meth); > > SSL_CTX_use_certific

Re: problem connecting to ssl server

2009-05-14 Thread Dr. Stephen Henson
On Wed, May 13, 2009, Folkert van Heusden wrote: > Hi, > > I have an ssl server. Really simple; > > // init > SSL_library_init(); > SSL_load_error_strings(); > bio_err = BIO_new_fp(stderr, BIO_NOCLOSE); > meth = SSLv23_server_method(); > ctx = SSL_CT

Re: problem connecting to ssl server MORE INFORMATION, EVEN MORE

2009-05-14 Thread Kyle Hamilton
SSL_CTX_set_cipher_list(ctx, "STRONG:HIGH:FIPS:@STRENGTH"); -Kyle H On Thu, May 14, 2009 at 5:46 AM, Folkert van Heusden wrote: > Ok I added debugging code and it gives me this; > > 27559:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared > cipher:s3_srvr.c:1006: > > What does that mea

Re: problem connecting to ssl server MORE INFORMATION, EVEN MORE

2009-05-14 Thread Folkert van Heusden
Ok I added debugging code and it gives me this; 27559:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr.c:1006: What does that mean from a configuration point of view? I have the default openssl package installed and also the cacert.org.pem-file in the correct place. O

Re: problem connecting to ssl server MORE INFORMATION

2009-05-14 Thread Folkert van Heusden
ssldump gives me the following information: belle:/home/folkert# ssldump -a -A -H -k Personal/src/https2http/key.pem -i lo New TCP connection #1: localhost(33455) <-> localhost(996) 1 1 0.0001 (0.0001) C>S SSLv2 compatible client hello Version 3.1 cipher suites Unknown value 0x39 Unknown