This little (ms?) bug has been bothering me for ages...
ms ie 4.x fails the ssl v3 handshake if the cert fqdn matches the asked
url.
The following incomplete kludge might shed some light on it:

--- ../../openssl-0.9.3a/ssl/s3_srvr.c.orig     Sun May 23 16:32:52 1999
+++ s3_srvr.c   Wed Jun  9 11:20:11 1999
@@ -1543,6 +1543,18 @@
                return(1);
                }
 
+#ifdef IE_KLUDGE
+       if (s->s3->tmp.message_type == SSL3_MT_CLIENT_HELLO)
+               {
+#if 0 /* receive a hello; this worked w/ SSLeay 0.9.0b */
+               s->shutdown=0;
+               ret=ssl3_get_client_hello(s);
+               if (ret <= 0) return(0);
+               s->state=SSL3_ST_SW_SRVR_HELLO_A;
+               s->init_num=0;
+#endif
+               return(1);
+               }
+#endif
+
        if (s->s3->tmp.message_type != SSL3_MT_CERTIFICATE)
                {
                al=SSL_AD_UNEXPECTED_MESSAGE;


--- Don't flame me for the mail program; better ones are not routed by
the mail gw ---
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to