Re: Getting "OpenSSL: Exit: error in SSLv3 read client certificate A" when client connects

2012-11-10 Thread Jeremy Bratton
mproves security. So much to learn, but now I know more about openssl s_client. Jeremy > Carl > > From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] on > behalf of Jeremy Bratton [yer...@gmail.com] > Sent: 08 November 2012 04:58 > To: openssl-users@openss

Re: Getting "OpenSSL: Exit: error in SSLv3 read client certificate A" when client connects

2012-11-07 Thread Jeremy Bratton
NULL 4 3 0.0365 (0.) S>C Handshake Certificate 4 4 0.0365 (0.) S>C Handshake ServerHelloDone 40.0600 (0.0234) C>S TCP FIN 40.0602 (0.0002) S>C TCP FIN On Tue, Nov 6, 2012 at 8:35 AM, Jeremy Bratton wrote: > I'm using OpenSSL 0.

Re: certificate_authority in handshake?

2007-08-22 Thread Jeremy Bratton
On 8/22/07, Marek Marcola <[EMAIL PROTECTED]> wrote: > Hello, > > In the application I'm currently working on which uses OpenSSL via > > Ruby, I seem to be having a problem with the handshake when a client > > connects to my server, though my client to their server works fine. > > >From an ssldump,

certificate_authority in handshake?

2007-08-22 Thread Jeremy Bratton
In the application I'm currently working on which uses OpenSSL via Ruby, I seem to be having a problem with the handshake when a client connects to my server, though my client to their server works fine. >From an ssldump, it appears that my server's certificate request does not include any certific

Re: Choose server certificate based on client IP address?

2007-08-20 Thread Jeremy Bratton
Thank you both -- Jim and Christopher -- for your advice. I have it working now. It was just good to know that my plan was correct so I could focus on finding the issue in my implementation. Jeremy __ OpenSSL Project

Choose server certificate based on client IP address?

2007-08-17 Thread Jeremy Bratton
I'm currently working on a client/server order system that uses SSL with client and server certificates. I'm using OpenSSL via Ruby. Everything has been working well, but we need to add a new trading partner to the system and they required us to get a different certificate for use only with them.