Re: TLS client certificates internal error

2015-12-08 Thread Alexander Shorin
On Tue, Dec 8, 2015 at 11:58 PM, Michael Power wrote: > Does this help: > ~$ erl -eval 'erlang:display(erlang:system_info(otp_release)), halt().' > -noshell > "R16B03" > $ erl > Erlang R16B03 (erts-5.10.4) [source] [64-bit] [smp:6:6] [async-threads:10] > [hipe] [kernel-poll:false] > > > Eshell

Re: TLS client certificates internal error

2015-12-08 Thread Alexander Shorin
On Wed, Dec 9, 2015 at 12:40 AM, Tom Chiverton wrote: > I gave up trying to get this to work (on Ubuntu LTS and Amazon Linux) and > just stuck Apache in front of it. > There are several notes across the docs about Erlang's SSL support being > 'odd'. Indeed, SSL in Erlang is quite strange thing. Y

Re: TLS client certificates internal error

2015-12-08 Thread Michael Power
I have come to the same conclusion. On 12/8/15, 1:40 PM, "Tom Chiverton" wrote: >I gave up trying to get this to work (on Ubuntu LTS and Amazon Linux) >and just stuck Apache in front of it. >There are several notes across the docs about Erlang's SSL support being >'odd'. > >-- >Tom > >On 0

Re: TLS client certificates internal error

2015-12-08 Thread Tom Chiverton
I gave up trying to get this to work (on Ubuntu LTS and Amazon Linux) and just stuck Apache in front of it. There are several notes across the docs about Erlang's SSL support being 'odd'. -- Tom On 08/12/15 01:58, Michael Power wrote: I am trying to get couchdb to work with client certificate

Re: TLS client certificates internal error

2015-12-08 Thread Michael Power
Does this help: ~$ erl -eval 'erlang:display(erlang:system_info(otp_release)), halt().' -noshell "R16B03" $ erl Erlang R16B03 (erts-5.10.4) [source] [64-bit] [smp:6:6] [async-threads:10] [hipe] [kernel-poll:false] Eshell V5.10.4 (abort with ^G) On 12/8/15, 9:04 AM, "Alexander Shorin" w

Re: TLS client certificates internal error

2015-12-08 Thread Alexander Shorin
On Tue, Dec 8, 2015 at 7:49 PM, Michael Power wrote: > Erlang (SMP,ASYNC_THREADS,HIPE) (BEAM) emulator version 5.10.4 Is this Erlang R16B03 or R16B03-1? That's important since the latter has the same erts version while contains, may be, important ssl bug fixes for you. Just run erl to see that ve

Re: TLS client certificates internal error

2015-12-08 Thread Michael Power
~$ erl +V Erlang (SMP,ASYNC_THREADS,HIPE) (BEAM) emulator version 5.10.4 There was only the one error line in the couchdb logs. I just changed the log level to debug, no joy still just the one line: [Tue, 08 Dec 2015 16:44:25 GMT] [info] [<0.32.0>] Apache CouchDB has started on https://0.0.0.0

Re: TLS client certificates internal error

2015-12-07 Thread Alexander Shorin
Hi, To make stack full, what is your Erlang version? Was the only one error line in CouchDB logs you posted here? Few else thoughts: isn't this Ubuntu openssl bug? http://serverfault.com/questions/389197/ssl-routinesssl23-writessl-handshake-failure -- ,,,^..^,,, On Tue, Dec 8, 2015 at 4:58 AM,

TLS client certificates internal error

2015-12-07 Thread Michael Power
Hello, I am trying to get couchdb to work with client certificates. I can’t seem to get it to work. I am getting an internal error from couchdb. Here is how I am currently trying to connect: openssl s_client -connect localhost:6984 -cert ~mpower/couchdb.cert.pem -key ~mpower/private/couchdb.