SSL handshake failed - 14090086 and 14095412

2007-02-28 Thread caplechu
Hello, I have an application that use SSL protocol, for this we have made a test certificate with Verisign and we have installed the CA Certificate, the private key and the public certificate in the server. We use Vitria that inside runs on Java. When we try to connect to it from IE or Mozilla

SSL based client authentication

2007-02-28 Thread Snuggles
Hi, I'm writing my own webserver and I want it to be able to do SSL based client authentication. It can already do HTTPS, but when I try to do the SSL based client authentication, the connection gets dropped. I use the following routine to bind a SSL socket. SSL_CTX *ssl_binding(char *keyfile,

Re: SSL handshake failed - 14090086 and 14095412

2007-02-28 Thread Julius Davies
If you wouldn't mind moving over to not-yet-common-ssl mailing list (SSL and Java) I might be able to help you over there: http://lists.juliusdavies.ca/listinfo.cgi/not-yet-commons-ssl-juliusdavies.ca/ To me it looks like you are missing a client certificate. Try using java -jar

Re: SSL based client authentication

2007-02-28 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Snuggles wrote: Hi, Hello Snuggles, I'm writing my own webserver and I want it to be able to do SSL based client authentication. It can already do HTTPS, but when I try to do the SSL based client authentication, the connection gets dropped. I use

ERROR: EVP_PKEY_get1_RSA:expecting an rsa key

2007-02-28 Thread Rafal Masztalerz
Hello When I try to change the pass phrase in my private key , I receive the following error: Enter PEM pass phrase: unable to load key 7738:error:0607907F:digital envelope routines:EVP_PKEY_get1_RSA:expecting an rsa key:p_lib.c:219: Failed to change passphrase Could you please what is the

Re: ERROR: EVP_PKEY_get1_RSA:expecting an rsa key

2007-02-28 Thread Dr. Stephen Henson
On Wed, Feb 28, 2007, Rafal Masztalerz wrote: Hello When I try to change the pass phrase in my private key , I receive the following error: Enter PEM pass phrase: unable to load key 7738:error:0607907F:digital envelope routines:EVP_PKEY_get1_RSA:expecting an rsa key:p_lib.c:219: Failed

Re: ERROR: EVP_PKEY_get1_RSA:expecting an rsa key

2007-02-28 Thread Victor Duchovni
On Wed, Feb 28, 2007 at 02:49:31PM +0100, Rafal Masztalerz wrote: Hello When I try to change the pass phrase in my private key , I receive the following error: Enter PEM pass phrase: unable to load key 7738:error:0607907F:digital envelope routines:EVP_PKEY_get1_RSA:expecting an rsa

Re: ERROR: EVP_PKEY_get1_RSA:expecting an rsa key

2007-02-28 Thread Rafal Masztalerz
Yes, you're right. My private key has the following heading and tail. -BEGIN DSA PRIVATE KEY- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC, . -END DSA PRIVATE KEY- so please tell me what I should do to change this passphrase. Is it possible in general

Re: ERROR: EVP_PKEY_get1_RSA:expecting an rsa key

2007-02-28 Thread Christian Hohnstaedt
On Wed, Feb 28, 2007 at 03:48:03PM +0100, Rafal Masztalerz wrote: Yes, you're right. My private key has the following heading and tail. -BEGIN DSA PRIVATE KEY- Please compare carefully ... :-) -BEGIN RSA PRIVATE KEY- Christian

Re: ERROR: EVP_PKEY_get1_RSA:expecting an rsa key

2007-02-28 Thread Victor Duchovni
On Wed, Feb 28, 2007 at 03:48:03PM +0100, Rafal Masztalerz wrote: Yes, you're right. My private key has the following heading and tail. -BEGIN DSA PRIVATE KEY- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC, . -END DSA PRIVATE KEY- $ openssl

How to Authenticate the Public key

2007-02-28 Thread Ravi Bhatt
Hello, Now that I am able to extract the Public Key (using X509_get_pubkey) from the Root Certificate the Client Certificate (both pkey-type = RSA), can someone please tell me what function I need to use to Authenticate the client using the Root certificate Public Key (Both uses RSA-SHA1)