[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
strange error with openssl client
Hi,
OpenLDAP-2.1.19
OpenSSL-0.9.6g
I'm preparing some documentation on OpenLDAP. When testing my
certificates I get following error
.-.-.-.-.-.-.---.-.-.--.-.-.-.-.-.-.-..-
dieter@marin:~> openssl s_client -connect localhost:389 -showcerts
CONNECTED(00000003)
2229:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:226
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.
Testing the same certificates with OpenLDAP-2.1.3 showed the complete
certificate chain. What has been changed between 2.1.3 and 2.1.19?
Just to make it clear, TLS works fine on the system, 'openssl verify'
verifies my certificates,
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
dieter@marin:~> openssl verify /home/dieter/Cert/ldap_clientcert.pem
/home/dieter/Cert/ldap_clientcert.pem: OK
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
It is just s_client giving errors.
Any ideas what happend?
I remember having seen a website explaining openssl error
numbers but that seems having been vanished, any hints on this
topic?
-Dieter
--
Dieter Kluenter | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter(at)dkluenter.de
http://www.avci.de