I've tried "gnutls-cli -d 1 -p 22222 --x509certfile /path/servercert.pem --x509cafile /path/cacert.pem --x509keyfile /path/serverkey.pem domain.org "

and the client returns :

*** Fatal error: Key usage violation in certificate has been detected.
*** Handshake has failed
GNUTLS ERROR: Key usage violation in certificate has been detected.

I've also tried with clientcert.pem and clientkey.pem, acording to an example i found on the web ( http://libvirt.org/remote.html ), because i understood that the cert and key can/must be different on the server and client, but i get the same error.


Regards
Gonzague




Nikos Mavrogiannopoulos a écrit :
On Tue, Apr 13, 2010 at 7:18 PM, gonzagueddr <[email protected]> wrote:

"gnutls-cli -d 1 -p
22222 --x509certfile /path/servercert.pem --x509cafile /path/cacert.pem

The issue is here. You must also specify the --x509keyfile parameter.
Otherwise the
x509certfile parameter is being ignored.

regards,
Nikos





_______________________________________________
Help-gnutls mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/help-gnutls

Reply via email to