RE: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:.\ssl\s3_clnt.c:984

2012-01-19 Thread Hamid.Shahid
: Wednesday, January 18, 2012 12:18 AM To: openssl-users@openssl.org Cc: Shahid, Hamid Subject: RE: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:.\ssl\s3_clnt.c:984 > From: owner-openssl-us...@openssl.org On Behalf Of hamid.sha...@sungard.com > Sent: Tuesday, 17 January

RE: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:.\ssl\s3_clnt.c:984

2012-01-18 Thread Dave Thompson
> From: hamid.sha...@sungard.com [mailto:hamid.sha...@sungard.com] > Sent: Wednesday, 18 January, 2012 10:36 > - Yes, I am calling load certificates before the trying to > make a connection. According to your suggestion, I have tried > to used openssl s_client to see the callback events and go

RE: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:.\ssl\s3_clnt.c:984

2012-01-17 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of hamid.sha...@sungard.com > Sent: Tuesday, 17 January, 2012 09:01 > I am trying to create SSL connection with a remote server > using OpenSSL in visual C++ (Visual Studio-2008, Win-7). I am > getting the following errors. Plea

SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:.\ssl\s3_clnt.c:984

2012-01-17 Thread Hamid.Shahid
Hi, I am trying to create SSL connection with a remote server using OpenSSL in visual C++ (Visual Studio-2008, Win-7). I am getting the following errors. Please let me know, what does this error indicates, and how can it be rectified. Please reply me on my email address as well, because I asked

Re: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

2002-01-16 Thread Lutz Jaenicke
On Wed, Jan 16, 2002 at 06:02:11PM +0100, Douglas Wikström wrote: > do you mean this? > > delfin ~/dmix/mixes/mix0/ssl>ls -R > .: > ca cert0.pem key0.pem openssl.cnf > > ./ca: > b319c4fe.pem bf801f59.pem cert0.pem cert1.pem cert2.pem > ec419faf.pem > delfin ~/dmix/mixes/mix0/ssl>openssl

Re: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

2002-01-16 Thread Douglas Wikström
> Ok, SSL_VERIFY_PEER enforces all verification errors to be enforced, > thus SSL_connect() will result in hard failure, as shown below. > You will never reach the SSL_get_verify_result() below. No, you are right, Ive been trying stuff... > > openssl req -config ${MIX_HOME}/ssl/openssl.cnf -new

Re: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

2002-01-16 Thread Lutz Jaenicke
On Wed, Jan 16, 2002 at 05:31:21PM +0100, Douglas Wikström wrote: > /* Override setting from ssl_ctx created in NET_ssl_ctx_new. > Verify the client peer. */ > SSL_set_verify(ssl, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE, NULL); This should be on the client, shouldn't it? Therefore SSL_V

SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

2002-01-16 Thread Douglas Wikström
Hello! I have a simple webserver running HTTPS. It works fine with Navigator, which leads me to believe that the problem is on my client side. To init the SSL_CTX I do: if (SSL_CTX_load_verify_locations(*ssl_ctx, cafile, capath) == 0) { } if(SSL_CTX_use_certificate_file(*ssl_ctx, certfile