Hi All I have written an SSL client that performs SSL handshake with any webserver and validates the certificate recevied from the Webserver. With all other site the handshake works pefectly fine and has been tested with 100's of secure sites..
the SSL handshake between my client and www.harryanddavid.com webserver fails. Instead of the last SSL finished message during handshake, the webserver sends an 85 byte alert message and than a TCP FIN message to close the connection. apart from that all other packes in sniffer traces are identical to the sniffer traces when Internet Explorer is doing SSL handshake with same webserver. The SSL error string is some decrypt failure... Even the OpenSSL windows client (openssl.exe) provided when u build openSSL over windows gives same error when doing SSL handshake with the above harry webserver.. Anyone having an SSL Client plz try to do SSL handshake with www.harryanddavid.com server and let me know whether its succesful or not. I am assuming i might be missing some scenario. Also when we use SSLv2 only this works fine.. Only with SSLv23 the handshake fails. Any ideas or pointers how to proceed further wud be of great help.. Also does the OpenSSL supports the chained certificates (i.e. server certificate than has one Cert + its issuer in same cert).. Do we need to call any specific API to handle these..??? Thanks and regards -Krishna ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
