Re: Question about intermediate certificate chain

2013-05-22 Thread Peter Sandelin
Please note that s_client is used for debugging connections not certs and might connect EVEN IF the server certificate is not good. http://www.openssl.org/docs/apps/s_client.html#item__verify "Currently the verify operation continues after errors so all the problems with a certificate chain can be

Cipher sorting: ssl_cipher_apply_rule never processes list with one member?

2013-05-17 Thread Peter Sandelin
Hi, while debugging another thing I discovered what I think is a bug in the CIPHER list handling. Can someone please confirm or disprove that this is a bug? OpenSSL version 1.0.1c. In function ssl_cipher_apply_rule the break criteria "(curr == last) is strange. I arrive here with only ONE member

Re: openssl s_server client verification

2013-04-02 Thread Peter Sandelin
On 22 March 2013 00:19, barcaroller wrote: > > When the openssl s_server program is unable to verify a client certificate, it prints out the following error message: > >verify error:num=21:unable to verify the first certificate >verify return:1 > > but then continues running as if nothing