Personally, I find sslscan (http://sourceforge.net/projects/sslscan/) an invaluable tool to see just what the server accepts and what it does not....
Dave -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Jakob Bohm Sent: Thursday, January 05, 2012 8:51 AM To: [email protected] Subject: Re: Having problem using SSL On 1/4/2012 6:36 PM, [email protected] wrote: > > Hello, > > I have a problem using SSL. When I click run, it immediately logs > off. I look at the log and I see: > <snip> > */Vaneita Howell, AVP/*// > > */Technical Account Manager/*// > > */State Street eExchange Solutions /* > > I am afraid more context is needed to understand this issue (what is the server, how is it configured, what crypto options are set on the server and client etc.). However the error messages seem to indicate that something (probably the other end of the connection) has specified a very insecure (much less than 1024 bits) cryptographic key size to be used with the Diffie-Hellman public key algorithm. Alternatively, something is wrong on a fundamental protocol level and the old OpenSSL library in your copy of stunnel misunderstands completely, spitting out nonsense error messages. Of cause there is also the possibility that you are under attack and the attacker is trying to mess with the encryption in a way that OpenSSL is actually detecting and blocking to protect you. -- Jakob Bohm, CIO, WiseMo A/S,<http://www.wisemo.com> This public comment is non-binding and may contain errors. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
