Re: client/server verify problems

2001-12-20 Thread Chris Lewis
Lutz Jaenicke wrote: Do we need to resort to a verify callback to permit an 0.9.6b server to accept server certs from the client? Yes. You can globally set the purposed to be checked for, but this is only possible before the handshake is started (SSL_set_purpose()). This is however a

Re: client/server verify problems

2001-12-15 Thread Lutz Jaenicke
On Fri, Dec 14, 2001 at 01:18:24PM -0500, Chris Lewis wrote: When we use our client with a verisign-signed server cert, our server side successfully verifies. When we use openssl s_client (or our client) with our entrust cert, our server spits out: error:140890B2:SSL

client/server verify problems

2001-12-14 Thread Chris Lewis
We're porting some (previously) working code from an ancient version of ssleay to openssl 0.9.6b (HPUX). We're having a problem (apparently) with the server-side of a client-server application, both ends using openssl 0.9.6b. We're using locally generated certificates (Entrust PKI) for both the