Nick De Roeck wrote:

> I am attempting to compile opensll (0.9.5a) by means of MetroWerk's
> Codewarrior (CW) compiler.
>
> [snip]
>
> on the NT both the server and
> the client fail during the handshake:
>
> the client reports (connecting to Thawte's secure webserver):
> 251:error:1408F071:SSL routines:SSL3_GET_RECORD:bad mac
> decode:s3_pkt.c:383:
>
> [snip]

I have encountered exactly the same "bad mac decode" error before, although
I am using VC++6 on Windows 98.  My HTTPS client application attempts to
connect to its.bocgroup.com (210.177.52.102) using SSLv23_method, but fails
and returns that message.  Even setting the SSL_OP_NO_TLSv1 option, which
solves a lot of problem when using SSLv23_method, does not help.  However,
it is strange that both SSLv2_method and SSLv3_method work fine with that
site.

I checked the mailing list archive and found this:

"In 90% of all cases where one receives this error this was caused by a
cached old certificate/key information in the browser."

However, I don't think it is a problem with cached certificate/key because
my client application does not have any kind of cache.

Can anyone help us?


Regards,
Michael Lee

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to