Hallo,I'm trying to use certicate with 0.9.8h OpenSSL version.In my application
code, working as client, I've an error that can be replicated from linux shell
as follows:
root@myboard:~# openssl versionOpenSSL 0.9.8h 28 May 2008
root@myboard:~# openssl verify -purpose sslserver -CAfile cacert.pe
> I'm currently trying to integrate wpa_supplicant and OpenSSL 0.9.8k to
> authenticate to a wireless network using EAP-TLS. It seems
> like I'm failing
> on verifying the server certificate. Can anybody interpret
> the error for me
>
> error:0D0C50A1:asn1 encoding
> routines:ASN1_item_verify:unkno
anks!
SSL: SSL_connect:SSLv3 read server hello A
TLS: Certificate verification failed, error 7 (certificate signature
failure) depth 2 for '/CN=WiMAX Forum(R) Server Root-CA/O=WiMAX
Forum(R)/C=US'
SSL: (where=0x4008 ret=0x233)
SSL: SSL3 alert: write (local SSL3 detected an error):fatal:decry
To close out this issue in the hopes that this will be of use to someone
in the future, Dr. Henson greatly helped in tracking the problem down to
a PHP extension that was calling EVP_cleanup().
"When you have a shared library using OpenSSL and multiple applications
things like algorithm tables
08:42:20 2009] [error] Certificate Verification: Error (7):
certificate signature failure
[Wed Jul 08 08:42:20 2009] [debug] ssl_engine_kernel.c(1770): OpenSSL:
Write: SSLv3 read client certificate B
[Wed Jul 08 08:42:20 2009] [debug] ssl_engine_kernel.c(1789): OpenSSL:
Exit: error in SSLv3 read
09] [error] Certificate Verification: Error (7):
certificate signature failure
[Tue Jul 07 15:12:27 2009] [info] [client 10.10.10.4] SSL library error 1 in
handshake (server 10.10.10.4:443)
[Tue Jul 07 15:12:27 2009] [info] SSL Library Error: 218910881
error:0D0C50A1:lib(13):func(197):reason(161)
[Tue Jul 0
09] [error] Certificate Verification: Error (7):
certificate signature failure
[Tue Jul 07 15:12:27 2009] [info] [client 10.10.10.4] SSL library error
1 in handshake (server 10.10.10.4:443)
[Tue Jul 07 15:12:27 2009] [info] SSL Library Error: 218910881
error:0D0C50A1:lib(13):func(197):reason(161)
[Tue Jul 0
BDY.RTF
Hi,
I'm using the sign.sh script that came with mod_ssl to sign a csr.
The command ./sign.sh server.csr gives an error
"error 7 at 0 depth lookup:certificate signature failure"
What does this mean and what I am doing wrong?
Any help would be appreciated.
Sorry if I'm asking a question
