RE: mutual-TLS / mTLS Example with certificate problem

2020-05-14 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > Andreas Tengicki > Sent: Thursday, May 07, 2020 03:23 > > 3) myserver vs openssl (and my client) is not working Did you do what I told you to do in my previous message? That is: > > Get rid of the call to

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-07 Thread Kyle Hamilton
On a tangent, this file format (and order) was actually finally standardized as "application/pem-certificate-chain" by RFC 8555 section 9.1 (the Automatic Certificate Management Environment protocol, or ACME). On Wed, May 6, 2020 at 2:59 PM Michael Wojcik wrote: > Get rid of the call to

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-07 Thread Raja Ashok
Hi Andreas, Below repo has examples to use OpenSSL for mTLS (mutual certificate authentication) with sample certificates. You can refer this. https://github.com/TalkWithTLS/TalkWithTLS/blob/master/src/sample/openssl_tls13_server_both_auth.c

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-07 Thread Andreas Tengicki
boun...@openssl.org] On Behalf Of >> Andreas Tengicki >> Sent: Wednesday, May 06, 2020 12:45 >> To: openssl-users@openssl.org >> Subject: mutual-TLS / mTLS Example with certificate problem >> >> I can not find a working mutual-TLS server/client example on github or &

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-07 Thread Matt Caswell
On 06/05/2020 19:44, Andreas Tengicki wrote: >     SSL_CTX_set_ecdh_auto(srvCtx->ctx, 1); Viktor and Michael have already provided some excellent advice on this so I won't cover the same ground. Just one note on this line though - this is actually unnecessary in modern versions of OpenSSL

RE: mutual-TLS / mTLS Example with certificate problem

2020-05-06 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > Andreas Tengicki > Sent: Wednesday, May 06, 2020 12:45 > To: openssl-users@openssl.org > Subject: mutual-TLS / mTLS Example with certificate problem > > I can not find a working mutual-TLS

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-06 Thread Viktor Dukhovni
On Wed, May 06, 2020 at 08:44:57PM +0200, Andreas Tengicki wrote: >     SSL_CTX_load_verify_locations(srvCtx->ctx,NULL,"../certs"); // Have you run "c_rehash" on "../certs" (not keen on relative file names here myself). > Client Side > = > >     SSL_CTX_set_ecdh_auto(ctx, 1); >    

Re: mutual-TLS / mTLS Example with certificate problem

2020-05-06 Thread Viktor Dukhovni
On Wed, May 06, 2020 at 08:44:57PM +0200, Andreas Tengicki wrote: > I can not find a working mutual-TLS server/client example on github or > the whole internet. Only some example for pieces of code. Communication > via socket without and with encryption (openSSL) is working, but with > mTLS not.

mutual-TLS / mTLS Example with certificate problem

2020-05-06 Thread Andreas Tengicki
Hello, I can not find a working mutual-TLS server/client example on github or the whole internet. Only some example for pieces of code. Communication via socket without and with encryption (openSSL) is working, but with mTLS not. I believe that I theoretical understand mTLS, but the practice will

Comparison trickery (Was: Certificate problem - SOLVED)

2014-07-09 Thread Dirk-Willem van Gulik
Op 9 jul. 2014, om 02:33 heeft Jeffrey Walton noloa...@gmail.com het volgende geschreven: On Tue, Jul 8, 2014 at 7:00 PM, Dave Thompson dthomp...@prinpay.com wrote: From: owner-openssl-us...@openssl.org On Behalf Of Jeffrey Walton Sent: Tuesday, July 08, 2014 16:20 ... Not sure if this is

[FWD] I have a concatenate certificate problem

2008-12-04 Thread Lutz Jaenicke
ching huang [EMAIL PROTECTED] Subject: I have a concatenate certificate problem To: [EMAIL PROTECTED] Dear all: I have a concatenate certificate file including device certificate ,sub CA certificate , root CA certificate with PEM Format. I trace supplicant log ,then it shows that only sign the one

Re: cacert.pem selfsigned certificate problem

2004-11-25 Thread Dr. Stephen Henson
On Wed, Nov 24, 2004, Florin Angelescu wrote: On Tuesday 23 November 2004 16:57, Dr. Stephen Henson wrote: On Tue, Nov 23, 2004, Florin Angelescu wrote: Hello I am trying to set up an ssl acces to ldap following http://www.openldap.org/faq/data/cache/185.html i created my ca

Re: cacert.pem selfsigned certificate problem

2004-11-24 Thread Dr. Stephen Henson
On Wed, Nov 24, 2004, Florin Angelescu wrote: On Tuesday 23 November 2004 16:57, Dr. Stephen Henson wrote: On Tue, Nov 23, 2004, Florin Angelescu wrote: Hello I am trying to set up an ssl acces to ldap following http://www.openldap.org/faq/data/cache/185.html i created my ca

Re: cacert.pem selfsigned certificate problem

2004-11-24 Thread Florin Angelescu
On Wednesday 24 November 2004 11:44, Dr. Stephen Henson wrote: On Wed, Nov 24, 2004, Florin Angelescu wrote: On Tuesday 23 November 2004 16:57, Dr. Stephen Henson wrote: On Tue, Nov 23, 2004, Florin Angelescu wrote: Hello I am trying to set up an ssl acces to ldap following

Re: cacert.pem selfsigned certificate problem

2004-11-24 Thread Dr. Stephen Henson
On Wed, Nov 24, 2004, Florin Angelescu wrote: On Wednesday 24 November 2004 11:44, Dr. Stephen Henson wrote: On Wed, Nov 24, 2004, Florin Angelescu wrote: On Tuesday 23 November 2004 16:57, Dr. Stephen Henson wrote: On Tue, Nov 23, 2004, Florin Angelescu wrote: Hello I am

Re: cacert.pem selfsigned certificate problem

2004-11-23 Thread Dr. Stephen Henson
On Tue, Nov 23, 2004, Florin Angelescu wrote: Hello I am trying to set up an ssl acces to ldap following http://www.openldap.org/faq/data/cache/185.html i created my ca and signed the certificates for the server and client but i still get a 'self signed error' i checked and i saw that

Re: cacert.pem selfsigned certificate problem

2004-11-23 Thread Florin Angelescu
On Tuesday 23 November 2004 16:57, Dr. Stephen Henson wrote: On Tue, Nov 23, 2004, Florin Angelescu wrote: Hello I am trying to set up an ssl acces to ldap following http://www.openldap.org/faq/data/cache/185.html i created my ca and signed the certificates for the server and client

Re: Is this a certificate problem?

2001-01-26 Thread Greg Stark
] _ - Original Message - From: "Terry Bird" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, January 25, 2001 9:10 PM Subject: Is this a certificate problem? Hi, Im new to SSL and Im having trouble with RC4-128 encrypted sites. Im hoping tha

Is this a certificate problem?

2001-01-25 Thread Terry Bird
-verify_result); SSLerr(SSL_F_SSL3_GET_SERVER_CERTIFICATE,SSL_R_CERTIFICATE_VERIFY_FAILED); goto f_err; } This code is in the function ssl3_get_server_certificate(), in the file s3_clnt.c. So, does this look like a certificate problem? Thanks for any help. Terry

making a server certificate problem

2000-02-25 Thread Osvaldo Brito
Hi, I want to generate a server certificate. For that have to sign my server.csr file with my self signed CA. I used this: openssl ca -config openssl.cnf -md md5 -keyfile ca.key -cert ca.crt -in server.csr -out mycert.crt and i've got this error message: wrong number of fields on line 1