What is a "sslv3 bad certificate" when OpenSSL connects to a self-signed SSL server?
-
I'm trying to save server certificates to my local store. OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008. Using "openssl s_client -showcerts -connect", one server is fine: CONNECTED(00000003) depth=0 /C=xx/postalCode=xxx/ST=xx/L=xxxxxxx/O=xxx/OU=xx/CN=host.domain verify error:num=18:self signed certificate verify return:1 depth=0 /C=xx/postalCode=xxx/ST=xx/L=xxxxxxx/O=xxx/OU=xx/CN=host.domain verify return:1 But one is not: CONNECTED(00000003) depth=0 /C=yy/ST=yy/L=yyyy/O=yyy/OU=yy/CN=host.domain verify error:num=18:self signed certificate verify return:1 depth=0 /C=yy/ST=yy/L=yyyy/O=yyy/OU=yy/CN=host.domain verify return:1 14236:error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate:s3_pkt.c:1086:SSL alert number 42 14236:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: What could be the difference between these two self-signed certificates, that makes the first valid and the second invalid?
-
Answer:
What version of OpenSSL? 0.9.8 had a problem with fragmented STLS. Also, ensure that your clocks are synched.
Mike Fratto at Quora Visit the source
Related Q & A:
- What is a self tailing winch?Best solution by en.wikipedia.org
- What is a good camcorder to buy if you have a Mac?Best solution by Yahoo! Answers
- What is a croupier? Where can I learn to be a croupier?Best solution by Yahoo! Answers
- What is a team foul, how is it different from a personal foul?Best solution by Yahoo! Answers
- What is a compensation you can expect after working with a company for 3 years?Best solution by workerscomplawyerhelp.com
Just Added Q & A:
- How many active mobile subscribers are there in China?Best solution by Quora
- How to find the right vacation?Best solution by bookit.com
- How To Make Your Own Primer?Best solution by thekrazycouponlady.com
- How do you get the domain & range?Best solution by ChaCha
- How do you open pop up blockers?Best solution by Yahoo! Answers
For every problem there is a solution! Proved by Solucija.
-
Got an issue and looking for advice?
-
Ask Solucija to search every corner of the Web for help.
-
Get workable solutions and helpful tips in a moment.
Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.