how to encrypt with openssl?

What is a "sslv3 bad certificate" when OpenSSL connects to a self-signed SSL server?

  • I'm trying to save server certificates to my local store. OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008. Using "openssl  s_client -showcerts -connect", one server is fine: CONNECTED(00000003) depth=0 /C=xx/postalCode=xxx/ST=xx/L=xxxxxxx/O=xxx/OU=xx/CN=host.domain verify error:num=18:self signed certificate verify return:1 depth=0 /C=xx/postalCode=xxx/ST=xx/L=xxxxxxx/O=xxx/OU=xx/CN=host.domain verify return:1 But one is not: CONNECTED(00000003) depth=0 /C=yy/ST=yy/L=yyyy/O=yyy/OU=yy/CN=host.domain verify error:num=18:self signed certificate verify return:1 depth=0 /C=yy/ST=yy/L=yyyy/O=yyy/OU=yy/CN=host.domain verify return:1 14236:error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate:s3_pkt.c:1086:SSL alert number 42 14236:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: What could be the difference between these two self-signed certificates, that makes the first valid and the second invalid?

  • Answer:

    What version of OpenSSL? 0.9.8 had a problem with fragmented STLS. Also, ensure that your clocks are synched.

Mike Fratto at Quora Visit the source

Was this solution helpful to you?

Related Q & A:

Just Added Q & A:

Find solution

For every problem there is a solution! Proved by Solucija.

  • Got an issue and looking for advice?

  • Ask Solucija to search every corner of the Web for help.

  • Get workable solutions and helpful tips in a moment.

Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.