More tests as you suggested:

openssl s_client -tls1_2 -connect XXX:9103
openssl s_server -state -tls1_2 -cipher SUITEB128 -accept 9103

Using default temp DH parameters
ACCEPT
SSL_accept:before/accept initialization
SSL3 alert write:fatal:handshake failure
SSL_accept:error in SSLv3 read client hello C
ERROR
139990990374592:error:1408A0C1:SSL routines:ssl3_get_client_hello:no
shared cipher:s3_srvr.c:1398:
shutting down SSL
CONNECTION CLOSED

Warm regards,
Fredrik

On Mon, Nov 17, 2014 at 1:09 PM, Fredrik Jansson
<fredrik.jansson...@gmail.com> wrote:
> Hi!
>
> I have tried with s_client, and I get the same error.
>
> Is there any kind of logging callback I can add to my server code that
> might shed some light on this (I have set SSL_CTX_set_info_callback)?
>
> Fredrik
>
> On Mon, Nov 17, 2014 at 1:01 PM, Dr. Stephen Henson <st...@openssl.org> wrote:
>> On Mon, Nov 17, 2014, Fredrik Jansson wrote:
>>
>>> Some more info,
>>>
>>> SSL_get_ciphers on the server and client:
>>> Info    2014-Nov-17 10:48:26.961112     All.TLSVerbose
>>> ECDHE-ECDSA-AES128-GCM-SHA256
>>> Info    2014-Nov-17 10:48:26.961114     All.TLSVerbose
>>> ECDHE-ECDSA-AES256-GCM-SHA384
>>>
>>> When I do the same on the client, both of the ciphers above are listed
>>> (among with several others).
>>>
>>
>> I'd suggest you try suite B with s_server/s_client and see if you still get 
>> an
>> error.
>>
>> Steve.
>> --
>> Dr Stephen N. Henson. OpenSSL project core developer.
>> Commercial tech support now available see: http://www.openssl.org
>> ______________________________________________________________________
>> OpenSSL Project                                 http://www.openssl.org
>> User Support Mailing List                    openssl-users@openssl.org
>> Automated List Manager                           majord...@openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to