Dr Stephen Henson wrote:
>
> Christian Buysschaert wrote:
> >
> > Hello Bertie,
> >
> > Thanks for providing this patch!
> >
> > I've been testing it but have been unsuccessful in getting it
> > to work. I'll provide my setup here perhaps somebody could
> > point out some things I've been doing wrong?
> >
>
> The actual error you receive:
>
> >[01/Jan/2000 15:30:02 00267] [error] OpenSSL: error:14089106:SSL
> >routines:SSL3_GET_CLIENT_CERTIFICATE:wrong message type
>
> Shows that everything is otherwise OK and MSIE considers the certificate
> acceptable for SGC.
>
> I've now checked in a fix to OpenSSL 0.9.5. It shouldn't be too hard to
> produce a patch for earlier versions of OpenSSL. Not much in that area
> has changed.
Since it is a protocol violation, shouldn't this behaviour be enabled by
a BUG flag?
Cheers,
Ben.
--
SECURE HOSTING AT THE BUNKER! http://www.thebunker.net/hosting.htm
http://www.apache-ssl.org/ben.html
"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
- Indira Gandhi
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]