Hello,

I have an application that use SSL protocol, for this we have made a test
certificate with Verisign and we have installed the CA Certificate, the
private key and the public certificate in the server. We use Vitria that
inside runs on Java.

When we try to connect to it from IE or Mozilla all things go well, I see
the certificate and if I accept it all goes well. The problem is when we try
to connect between machines the client shows this error:
Component HTTP Target: [message id: ] Using
'https://servitria2:20999/Service-initial/receiverTest?Orden=Nueva+orden' to
make request.
Peer certificate verification failed. Reason code: 2.
Component HTTP Target: Could not create SSL socket.
com.vitria.connectors.http.HTTPConnectionException:
HttpsTargetConnector-Project testHTTPConnector: Component HTTP Target: Could
not create SSL socket.
 
com.vitria.connectors.http.HttpTargetConnector.getSSLSocket(HttpTargetConnector.java:575)
  --- The linked exception is --- 
  java.net.SocketException: Xport: SSL handshake failed: error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
  com.vitria.roi.javanative.VTSocketImpl.connect(VTSocketImpl.java:118)
  com.vitria.roi.javanative.VTSocket.<init>(VTSocketFactory.java:112)

In the server I see this log:
SSL handshake failed: error:14095412:SSL routines:SSL3_READ_BYTES:sslv3
alert bad certificate
  vtsslcred.cxx:1010

The server certificate is like this (its path):
        Verisign Trial Server Server Test Root CA
                Verisign Trial Server Server Test CA
                        servitria2

Any clue will be appreciated but really appreciated because we have serious
problems in our application.
Thanks to all!!!!
-- 
View this message in context: 
http://www.nabble.com/SSL-handshake-failed---14090086-and-14095412-tf3308472.html#a9202852
Sent from the OpenSSL - User mailing list archive at Nabble.com.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to