RE: mutual-TLS / mTLS Example with certificate problem

2020-05-14 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > Andreas Tengicki > Sent: Thursday, May 07, 2020 03:23 > > 3) myserver vs openssl (and my client) is not working Did you do what I told you to do in my previous message? That is: > > Get rid of the call to use_certific

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-07 Thread Kyle Hamilton
On a tangent, this file format (and order) was actually finally standardized as "application/pem-certificate-chain" by RFC 8555 section 9.1 (the Automatic Certificate Management Environment protocol, or ACME). On Wed, May 6, 2020 at 2:59 PM Michael Wojcik wrote: > Get rid of the call to use_certi

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-07 Thread Raja Ashok
Hi Andreas, Below repo has examples to use OpenSSL for mTLS (mutual certificate authentication) with sample certificates. You can refer this. https://github.com/TalkWithTLS/TalkWithTLS/blob/master/src/sample/openssl_tls13_server_both_auth.c https://github.com/TalkWithTLS/TalkWithTLS/blob/master/s

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-07 Thread Andreas Tengicki
ssl-users-boun...@openssl.org] On Behalf Of >> Andreas Tengicki >> Sent: Wednesday, May 06, 2020 12:45 >> To: openssl-users@openssl.org >> Subject: mutual-TLS / mTLS Example with certificate problem >> >> I can not find a working mutual-TLS server/client example on g

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-07 Thread Matt Caswell
On 06/05/2020 19:44, Andreas Tengicki wrote: >     SSL_CTX_set_ecdh_auto(srvCtx->ctx, 1); Viktor and Michael have already provided some excellent advice on this so I won't cover the same ground. Just one note on this line though - this is actually unnecessary in modern versions of OpenSSL (anythin

RE: mutual-TLS / mTLS Example with certificate problem

2020-05-06 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > Andreas Tengicki > Sent: Wednesday, May 06, 2020 12:45 > To: openssl-users@openssl.org > Subject: mutual-TLS / mTLS Example with certificate problem > > I can not find a working mutual-TLS ser

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-06 Thread Viktor Dukhovni
On Wed, May 06, 2020 at 08:44:57PM +0200, Andreas Tengicki wrote: >     SSL_CTX_load_verify_locations(srvCtx->ctx,NULL,"../certs"); // Have you run "c_rehash" on "../certs" (not keen on relative file names here myself). > Client Side > = > >     SSL_CTX_set_ecdh_auto(ctx, 1); >    

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-06 Thread Viktor Dukhovni
On Wed, May 06, 2020 at 08:44:57PM +0200, Andreas Tengicki wrote: > I can not find a working mutual-TLS server/client example on github or > the whole internet. Only some example for pieces of code. Communication > via socket without and with encryption (openSSL) is working, but with > mTLS not. I

mutual-TLS / mTLS Example with certificate problem

2020-05-06 Thread Andreas Tengicki
Hello, I can not find a working mutual-TLS server/client example on github or the whole internet. Only some example for pieces of code. Communication via socket without and with encryption (openSSL) is working, but with mTLS not. I believe that I theoretical understand mTLS, but the practice will