On Tue, Dec 09, 2003, Marc Gaudichet wrote: > Hello, > > I'm trying to do client authentication and no server authentication. > When using SSL_VERIFY_PEER on the server, no certificate seems to be > verified. When using SSL_VERIFY_PEER|SSL_VERIFY_FAIL_IF_NO_PEER_CERT, an > error occurs on the server : 1010 : SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE > : sslv3 alert unexpected message. > > 1) Is it possible to only authenticate the client (and not the server) ? > 2) If so, what's my trouble ? >
If you mean the server doesn't actually have a certificate (anon DH ciphersuites) but requests one from the client then no: the specs don't allow this for SSL/TLS. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
