No certificate corresponds to SSL cipher suides

2004-08-16 Thread Liam Escario
Hello, I am trying to set up SSL for Tomcat 5 using OpenSSL and I am getting this error: java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLException: No available certificate corresponds to the SSL cipher suites which are enabled. Anybody know what my problem is? I'm using

RE: No certificate corresponds to SSL cipher suides

2004-08-16 Thread Liam Escario
java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLException: No available certificate corresponds to the SSL cipher suites which are enabled. Strangely enough, if I FIRST create a self-signed entry in my keystore before i import my CA signed-certificate, it works. Although this

Re: debbuging my application with entering into OpenSSL

2004-08-16 Thread Igal Ore
Igal Ore wrote: I have some quite simple application develloped to use OpenSSL 0.9.7d , and test simple calls throw engine API. i compiled OpenSSL , Linux Mandrake 10.0 pentium686 gcc 3.3.2, with debbuging info (./config -g). Now how should i compile my application that not shared library

AW: question about certificate creation

2004-08-16 Thread thomas . beckmann
Hzhijun, maybe this part from the openssl FAQs (at www.openssl.org) may help you: -- 1. Why do I get a "PRNG not seeded" error message? Cryptographic software needs a

SSL Error re pass phrase

2004-08-16 Thread H. Carter Harris
I'm trying to get two vhosts on separate public IPs using separate secure certificates working on an apache server (mods and version in log below). The operating system is Mandrake 10. The sites work perfectly without the secure certificates as IP based vhosts. I've been playing with the

Re: No certificate corresponds to SSL cipher suides

2004-08-16 Thread Mark Foster
Liam Escario wrote: java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLException: No available certificate corresponds to the SSL cipher suites which are enabled. Strangely enough, if I FIRST create a self-signed entry in my keystore before i import my CA signed-certificate, it

OpenSSL 0.9.7d WIN - IA64 port

2004-08-16 Thread d . mclellan
Hi: I'm now investigating build OpenSSL -0.9.7d on a WIN IA64 architecture machine. Has anyone had any experience with this, or is there any active work in progress to support WIN IA64 platforms? Thanks very much. Dave McLellan EMC Corporation, SPEA Engineering [EMAIL PROTECTED]/[EMAIL

FW: Netscape International step-up

2004-08-16 Thread Imran Badr
Hi, Somehow it didn't appear in the mailing list. I am submitting it again. Does Netscape international step-up work with openssl s_server? My initial thought was that one just needed the global_id certificate with s_server and hit it with an old Netscape browser like Communicator 4.7

Generating Test Certificates

2004-08-16 Thread Richard M. Hartman
The HOWTO\certificates.txt says to generate the self-signed cert with: openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095 I tried with both an RSA key and a DSA key. They each fail in slightly different ways, but both seem to be trying to get something from the