> [stkap...@cisco.com - Tue Feb 07 21:13:11 2012]: > > FYI - I have now tested with 1.0.1 beta 2 of openssl (again complied > on powerppc/linux) as well and found the same behavior. I also > tested against IIS on Windows 7 64bit as the server with the same > behavior. Maybe that will help with the search for a suitable test > server. > > Test used > $ openssl s_client -connect stk- > pc.a51.lab:443 -cert /config/lighttpd/ssl.pem -CAfile > /user/http_calist.pem -no_tls1_2 -no_tls1_1 > Works > > But > [C90- > A:~] $ openssl s_client -connect stk-pc.a51.lab:443 -cert > /config/lighttpd/ssl.pem -CAfile /user/http_calist.pem > Does not > and fails with a error 104 - which is IIS doing a hard reset on the > connection and reports bad_mac_record in window's schannel > provider. >
One more thing to try first. Please use the -prexit option to s_client (without any -no_* options) and include the result. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
