Step 1: perl Configure no-rsa VC-WIN32
Output: skipped (all successful no warnings or errors)
Step 2: ms\do_nasm
Output: skipped (all successful no warnings or errors)
Step 3: nmake -f ms\nt.mak
Output: skipped (all successful no warnings or errors)
Step 4: ssltest
Output:
283:error:0D09C08F:asn1 encoding routines:d2i_PublicKey:unknown
public key type:.\crypto\asn1\d2i_pu.c:104:
283:error:0B077066:x509 certificate routines:X509_PUBKEY_get:err
asn1 lib:.\crypto\asn1\x_pubkey.c:226:
283:error:140BF10C:SSL routines:SSL_SET_CERT:x509
lib:.\ssl\ssl_rsa.c:424:
ERROR in SERVER
283:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared
cipher:.\ssl\s3_srvr.c:769:
Protocol SSLv3, cipher (NONE), (NONE)
Step 5: openssl s_server -nocert -debug
Output:
Loading 'screen' into random state - done
Using default temp DH parameters
ACCEPT
(waits)
Step 6: openssl s_client -debug
Output:
Loading 'screen' into random state - done
CONNECTED(00000034)
write to 0030DA20 [00939DC0] (60 bytes => 60 (0x3C))
0000 - 16 03 00 00 37 01 00 00-33 03 00 38 c6 84 1c fe
....7...3..8....
0010 - 7c ef 8b 40 f4 bc d6 4f-a2 02 f8 fb a1 a7 c1 4f
|[email protected]
0020 - d9 53 79 c6 26 94 d5 a2-e0 6b 54 00 00 0c 00 13
.Sy.&....kT.....
0030 - 00 66 00 65 00 63 00 12-00 11 01 .f.e.c.....
003c - <SPACES/NULS>
read from 0030DA20 [009355A8] (5 bytes => 5 (0x5))
0000 - 15 03 00 00 02 .....
read from 0030DA20 [009355AD] (2 bytes => 2 (0x2))
0000 - 02 28 .(
322:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert
handshake failure:.\ssl\s3_pkt.c:956:SSL alert number 40
322:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake
failure:.\ssl\s3_pkt.c:490:
Output from s_server:
read from 0030DB50 [009355A8] (5 bytes => 5 (0x5))
0000 - 16 03 00 00 37 ....7
read from 0030DB50 [009355AD] (55 bytes => 55 (0x37))
0000 - 01 00 00 33 03 00 38 c6-84 1c fe 7c ef 8b 40 f4
...3..8....|..@.
0010 - bc d6 4f a2 02 f8 fb a1-a7 c1 4f d9 53 79 c6 26
..O.......O.Sy.&
0020 - 94 d5 a2 e0 6b 54 00 00-0c 00 13 00 66 00 65 00
....kT......f.e.
0030 - 63 00 12 00 11 01 c.....
0037 - <SPACES/NULS>
write to 0030DB50 [0093E9E0] (7 bytes => 7 (0x7))
0000 - 15 03 00 00 02 02 28 ......(
ERROR
316:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared
cipher:.\ssl\s3_srvr.c:769:
shutting down SSL
CONNECTION CLOSED
ACCEPT
(waits) send [^C]
Step 7: nmake -f ms\nt.mak clean
Output: skipped (all successful no warnings or errors)
Step 8: perl Configure VC-WIN32
Output: skipped (all successful no warnings or errors)
Step 9: ms\do_nasm
Output: skipped (all successful no warnings or errors)
Step 10: nmake -f ms\nt.mak
Output: skipped (all successful no warnings or errors)
Step 11: ssltest
Output:
Protocol TLSv1, cipher TLSv1/SSLv3, EDH-RSA-DES-CBC3-SHA
Step 12: openssl s_server -nocert -debug
Output:
Loading 'screen' into random state - done
Using default temp DH parameters
ACCEPT
(waits)
Step 6: openssl s_client -debug
Output:
Loading 'screen' into random state - done
CONNECTED(00000034)
write to 0030D2C0 [00940040] (130 bytes => 130 (0x82))
0000 - 80 80 01 03 01 00 57 00-00 00 20 00 00 16 00 00 ......W...
.....
0010 - 13 00 00 0a 07 00 c0 00-00 66 00 00 07 00 00 05
.........f......
0020 - 00 00 04 05 00 80 03 00-80 01 00 80 08 00 80 00
................
0030 - 00 65 00 00 64 00 00 63-00 00 62 00 00 61 00 00
.e..d..c..b..a..
0040 - 60 00 00 15 00 00 12 00-00 09 06 00 40 00 00 14
`...........@...
0050 - 00 00 11 00 00 08 00 00-06 00 00 03 04 00 80 02
................
0060 - 00 80 63 3d f8 43 0a 2c-00 0a fa 6b 2f bd 21 ab
..c=.C.,...k/.!.
0070 - 0e b2 59 c7 25 5a 8c fa-8b 4e 22 a2 3e 76 6a 28
..Y.%Z...N".>vj(
0080 - 31 21 1!
read from 0030D2C0 [009455A8] (7 bytes => 7 (0x7))
0000 - 15 03 01 00 02 02 28 ......(
283:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
handshake failure:.\ssl\s23_clnt.c:453:
Output from s_server:
read from 0030D420 [009455A8] (11 bytes => 11 (0xB))
0000 - 80 80 01 03 01 00 57 ......W
000b - <SPACES/NULS>
read from 0030D420 [009455B3] (119 bytes => 119 (0x77))
0000 - 00 00 16 00 00 13 00 00-0a 07 00 c0 00 00 66 00
..............f.
0010 - 00 07 00 00 05 00 00 04-05 00 80 03 00 80 01 00
................
0020 - 80 08 00 80 00 00 65 00-00 64 00 00 63 00 00 62
......e..d..c..b
0030 - 00 00 61 00 00 60 00 00-15 00 00 12 00 00 09 06
..a..`..........
0040 - 00 40 00 00 14 00 00 11-00 00 08 00 00 06 00 00
.@..............
0050 - 03 04 00 80 02 00 80 63-3d f8 43 0a 2c 00 0a fa
.......c=.C.,...
0060 - 6b 2f bd 21 ab 0e b2 59-c7 25 5a 8c fa 8b 4e 22
k/.!...Y.%Z...N"
0070 - a2 3e 76 6a 28 31 21 .>vj(1!
write to 0030D420 [0094E9E0] (7 bytes => 7 (0x7))
0000 - 15 03 01 00 02 02 28 ......(
ERROR
293:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared
cipher:.\ssl\s3_srvr.c:769:
shutting down SSL
CONNECTION CLOSED
ACCEPT
(waits) send [^C]
accept error 10004
0 items in the session cache
0 client connects (SSL_connect())
0 client renegotiates (SSL_connect())
0 client connects that finished
1 server accepts (SSL_accept())
0 server renegotiates (SSL_accept())
0 server accepts that finished
0 session cache hits
0 session cache misses
0 session cache timeouts
0 callback cache hits
0 cache full overflows (128 allowed)
Now I seem to be getting the same error if I do RSA or not. The ultimate
goal here is incorporate a non-RSA SSL/TLS connection into my already
writting client and server. They don't have anything to do with WWW, I just
want a secure socket communication established. I would like to generate my
own cert's on client/server startup as well so that I don't have to
distrubute the certificate on every server that is set up from this point
forth, and/or maintain a 24/7 certificate server.
Thanks,
DEJ
-----Original Message-----
DeJuan Jackson wrote:
>
> With the compile settings which I specified it (s_server) simply fails
with
> a "No shared ciphers" message. When I recompile without NO_RSA it works
> fine.
> Any other insite?
What are you trying to connect to it with? If its a standard Netscape or
MSIE web browser then it wont work because they don't support SSL
without RSA.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
