On 31-07-2013 08:22, Indtiny s wrote:
Hi ,
Since openssl.1.0.1c doesn't support "ECDHE-ECDSA-AES128-CCM" cipher
suite, I added this support in the openssl code.
It works fine with ECC certificates which are not self-signed.
When I process my ECC self-signed certificate, my webserver throughing
"X5*/09_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE"/*error during
certificate verification.
Attached is the ECC self signed certificate with
"ECDHE-ECDSA-AES128-CCM" cipher suite.
Pls throw some light to understand this problem .
Well you have marked the certificate policy extension as critical,
which means that validation must fail if the software doing the
verification does not know that Smart Energy 2.2 policy and how to
verify the certificate and its usage against its criteria.
In contrast, not marking an extension as critical means that software
is allowed to ignore it.
So marking the well known "key usage" as critical ensures that any
software too old to obey the restriction cannot use the certificate
which is good.
Marking your CPS as critical limits use of the certificate to software
specially modified to recognize it.
Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. http://www.wisemo.com
Transformervej 29, 2730 Herlev, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
