Thanks Steven, you were Oh So Close! I changed the method to SSLv2 and the SSL_accept went off as advertised! Way cool! Now, to get the rest of the coding in place :-| Jim ----- Original Message ----- From: "Reddie, Steven" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, March 07, 2001 1:12 AM Subject: RE: Certificate Parsing for a Newbie > That's not the version of the certificate but the version of the SSL > protocol that is being complained about. That particular piece of code is > expecting SSLv3. Chances are there is something wrong with the data that is > being sent, perhaps a corrupt buffer or such. > Steven > -- > Steven Reddie <[EMAIL PROTECTED]> > Senior Software Engineer > Computer Associates Pty Ltd (Australia) > > > > -----Original Message----- > > From: Jim Hibbits [SMTP:[EMAIL PROTECTED]] > > Sent: Wednesday, March 07, 2001 4:29 PM > > To: OpenSSL > > Subject: Certificate Parsing for a Newbie > > > > Thanks to Scott Taggart for answering Scott Grayban's > > question, but _I'm_ still a little in the dark. Following > > Scott T's guidelines, I've gotten a certfile that will pass > > the parse, but SSL_accept complains about a > > wrong version number. I didn't enter any version info > > when I generated the .PEM file, and I'm not quite sure > > where to look for this. I've looked at the sources, but > > I haven't been able to figure this out. The error message: > > > > 582:error:1408F10B:SSL routines:SSL3_GET_RECORD: > > wrong version number:[my_source_device_and_directory]S3_PKT.C;1: > > 290: > > > > This is on OpenVMS, but I hope that doesn't throw anybody. > > Strikes me that this is rather generic. > > > > (the ;1 after S3_PKT.C is an OpenVMS file version number. > > don't let that throw anybody...). > > > > Here's the cert file that I'm using: > > > > -----BEGIN CERTIFICATE----- > > MIICoTCCAgoCAQAwDQYJKoZIhvcNAQEEBQAwgZgxCzAJBgNVBAYTAlVTMQswCQYD > > VQQIEwJUWDEOMAwGA1UEBxMFUGxhbm8xGzAZBgNVBAoTElRFQ1N5cyBEZXZlbG9w > > bWVudDEWMBQGA1UECxMNQ29uc29sZSBXb3JrczEUMBIGA1UEAxMLSmltIEhpYmJp > > dHMxITAfBgkqhkiG9w0BCQEWEmpoaWJiaXRzQGVyb2xzLmNvbTAeFw0wMTAzMDcw > > MzQ3NTRaFw0wMjAzMDcwMzQ3NTRaMIGYMQswCQYDVQQGEwJVUzELMAkGA1UECBMC > > VFgxDjAMBgNVBAcTBVBsYW5vMRswGQYDVQQKExJURUNTeXMgRGV2ZWxvcG1lbnQx > > FjAUBgNVBAsTDUNvbnNvbGUgV29ya3MxFDASBgNVBAMTC0ppbSBIaWJiaXRzMSEw > > HwYJKoZIhvcNAQkBFhJqaGliYml0c0Blcm9scy5jb20wgZ8wDQYJKoZIhvcNAQEB > > BQADgY0AMIGJAoGBAL2sBQ44+EVQvWQX2PW6GL1ZcxS56NpV4e8VoIjwjXbGjVSI > > TkcAQ+JB/1QBwbNqO7vIp9iqM/rxU7uCCK4awus4HUftUn1+jfA5lCPz8mjw60Eg > > iEq7z1xQbR2wqfQuj/f53+Oo0Mgh36VFazSpMbjRKgbS4CUPHcAs7UTtb8pNAgMB > > AAEwDQYJKoZIhvcNAQEEBQADgYEAK4PAaxAOj1SFEXKKSvdj1xGJt0H1RazS1InR > > 87wC0h6Tp/RYRXuNjz1RqV0HFMYOXEHCLmoWf/g3K+g5SyH7fOKk20bVFscl/K9h > > qnt0ZgKwtRThwR4a7Ss6reVttWJMKGtyT0+UR6H3IlBAuYIEIN1AjqQZIadBdif5 > > 73unwKM= > > -----END CERTIFICATE----- > > -----BEGIN RSA PRIVATE KEY----- > > MIICXQIBAAKBgQC9rAUOOPhFUL1kF9j1uhi9WXMUuejaVeHvFaCI8I12xo1UiE5H > > AEPiQf9UAcGzaju7yKfYqjP68VO7ggiuGsLrOB1H7VJ9fo3wOZQj8/Jo8OtBIIhK > > u89cUG0dsKn0Lo/3+d/jqNDIId+lRWs0qTG40SoG0uAlDx3ALO1E7W/KTQIDAQAB > > AoGAeSCrFdsiCjo2yP5Fyx+ufvXp/XmAkDa6k9Hu9KUS4qCIT0zBGKy9rXfSVFbO > > 2gJk5VaOglqn2YFWpO+1FWL3yN35z/zPGkb1a34clDevqB30HnsqGJWMswKJGB8H > > XYujLvhIk8tyi65UOb9YSv44YNAD++1owyJ+Z4s3LoWldo0CQQD65FARPIu8rxLA > > VfeHRzDaJb5utijiXS5o+WA2bOREMFFk5sP0pT1r1jm79nAzE/5McLLPcF13k8gL > > MNZAJGs3AkEAwYiekKq7M9sq/JKsSQWTTYII/v9EvBvdKCWxn2gKUyv6zJalNjCG > > r+VxBSP9KmoLuHv3YWopR4L1mH+g2+QgmwJBALemEAXN7+t5q5wmUT4wmk3UewTH > > Sj4IP0SP5iFwq9ZOGAZn9OBLZB5ffXtc9NwusmJ5zCmT8pbpEfE/GlVxUxkCQQCx > > k06SxOUR9qZhq58DPWdkNc1VVBnYU+S/op5w+kCHAhKUSCF9MFdU67yhD92KXlU0 > > yCI7MvJ/WC1K6MhLGu3DAkBmDqI7OROOxMLFHovgw3oQSHv7xh25iq+Y5TOJqFOO > > vDGlngBuzSCLTdDz/mRGraYN3ukgExyHBnXRRtDmJ8N6 > > -----END RSA PRIVATE KEY----- > > > > HELP!!! > > > > Jim > > > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List [EMAIL PROTECTED] > > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
