'no peer certificate available' is a different error than 'peer certificate did not verify'. This means that the TLS server is running without a certificate. (TLS and SSL do *not* require servers to provide certificates, but they do require that servers must provide certificates before they ask for client authentication, else it's a protocol error.)
-Kyle H On Sun, Apr 25, 2010 at 4:47 AM, Modem Man <modem-...@gmx.net> wrote: > Dear readers, > > I know, it's great, sunny whether today, but may be someone would kindly > help, anyway ;-) > > Background: > I'm just debugging some problem around SSL_CTX_load_verify_locations() call > in my particular environment. Since I'm not able to find the reason for: > openssl.exe s_client -debug -state -connect 192.168.0.192:21 > is always reporting: > no peer certificate available, > so I think it's best to step into SSL_CTX_load_verify_locations() and to > see, what files and directories are _really_ tried to load and so on. > > Problem: > But I can't step into _any_ BIO_xxx or SSL_xxx functions. > VS2005 reports, it has the symbols: > > .... > \Training\ssl1\debug\libeay32.dll', Symbols loaded. > ....blahblah......\msvcr80d.dll', Symbols loaded. > \Training\ssl1\debug\ssleay32.dll', Symbols loaded. > .... > > but on pressing F11 (step into), nothing happens! > > Already copied all *.pdb to the same directory as my local copies of DLLs > are located, > also added ....\openss1_1.0.0.\out32dll to pdb search path. > > I built OpenSSL 1.0.0 release, as described in INSTALL.W32, using the > 'no-asm' and 'debug' options. > This created in ./out32dll aside others this: > > 08.04.2010 19:34 1.363.968 libeay32.dll > 08.04.2010 19:34 315.392 ssleay32.dll > 08.04.2010 19:34 771.324 libeay32.lib > 08.04.2010 19:34 56.834 ssleay32.lib > 08.04.2010 19:34 1.944.576 libeay32.pdb > 08.04.2010 19:34 420.864 ssleay32.pdb > 08.04.2010 19:34 385 ssleay32.dll.manifest > 08.04.2010 19:34 385 libeay32.dll.manifest > 08.04.2010 19:34 466.605 libeay32.exp > 08.04.2010 19:34 34.068 ssleay32.exp > > One question: Is the file size okay for really being DEBUG versions? > > Any hint or help is highly appreciated > by Modem Man > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
