marius gabi wrote:
> Hello!
> Here is what the log is showing:Received certificateSubject:
> "/C=FR/L=Rennes/ST=Brittany/O=IHE/OU=IHE/CN=Poiseau
> Eric/emailAddress=eric.pois...@inria.fr"Issuer:
> "/C=FR/L=Rennes/ST=Brittany/O=IHE/OU=IHE/CN=Poiseau
> Eric/emailAddress=eric.pois...@inria.fr"Verify result: certificate
> signature failure Verify depth: 2     
> Currently I'm not setting a specific value for the SslVerifyDepth.
> Regarding the OpenSSL DLL version I tried with 0.9.8e and 0.9.8h. 

You forgot to print out the certificate with:

Cert.GetRawText;

That would show you / us the *Signature Algorithm*.

Since there's a "certificate signature failure" it is my guess 
that an unsupported algorithm is used.

-- 
Arno Garrels



> --- On Mon, 5/2/11, Arno Garrels <arno.garr...@gmx.de> wrote:
> 
> From: Arno Garrels <arno.garr...@gmx.de>
> Subject: Re: [twsocket] SSL Certificates check
> To: "ICS support mailing" <twsocket@elists.org>
> Date: Monday, May 2, 2011, 5:10 PM
> 
> marius gabi wrote:
> 
>> I'm receiving the following message
>> in the SSLVerifyPeer event: Error = 7 (certificate signature
>> failure).
> 
> In the OnSslVerifyPeer event please do the following logging and
> post the result:
> 
> Log('Received certificate'#13#10 +
> 'Subject: "' + Cert.SubjectOneLine + '"'#13#10 +
> 'Issuer: "' + Cert.IssuerOneLine + '"'#13#10 +
> 'Verify result: ' + Cert.VerifyErrMsg +
> ' Verify depth: ' + IntToStr(Cert.VerifyDepth));
> 
> Log(Cert.GetRawText);
> 
> --
> Arno Garrels
> 
> 
> 
> --
> To unsubscribe or change your settings for TWSocket mailing list
> please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
> Visit our website at http://www.overbyte.be
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Reply via email to