I have some how got this issue fixed by adding a following tag in tomcat connectors list:
ciphers="SSL_RSA_WITH_RC4_128_SHA" Best regards, Wahaj _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wahaj Khan Sent: 08 May 2008 15:55 To: [email protected] Subject: Failing to using OpenSSL v0.9.8g with tomcat 5.5.9 over TLS Hi, I am trying to use OpenSSL 0.9.8e/0.9.8g to communicate with my web-server (Apache tomcat v5.5.9) and failing over TLS. If I communicate on non secure channel, I succeed. I can access my web-server using IE 7.0, firefox2.0+ successfully suggesting that the web-server is OK. By default Apache tomcat v5.5.9 runs over TLS protocol but it can be switched to SSL by tweaking its settings. I have tried both options and failed. The error I am getting at OpenSSL side is: OpenSSL> ocsp -issuer E:\\OpenSSL\\TestL2CA1-b64.cer -cert E:\\OpenSSL\\Mary-b64.cer -resp_text -nonce -url https://testmachine:8778 -no_cert_verify Error connecting BIO 5088:error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal err or:.\ssl\s23_clnt.c:578: error in ocsp I have used OpenSSL v0.9.8e to talk to another application which listens over SSL (not TLS) successfully. I am not sure whether this issue is due to OpenSSL failing to communicate over TLS or it is an issue at tomcat side. Can some one suggest some work-around. Best Regards, Wahaj
smime.p7s
Description: S/MIME cryptographic signature
