Dear Sir/Madam,

 

I installed Jabberd2 server (version 2.2.5), it worked perfectly if it
is configured such that the certificate is not mandatory for the
auth/encryption.  If the verify-mode in the c2s.xml is set to include
SSL_VERIFY_FAIL_IF_NO_PEER_CERT, such as 3 or 7, the TLS handshake fails
due to the client side doesn't send its certificate to the server.

 

I debug the problem further and found that the server side sent an empty
CA_list to the client side in the certificate_request message so the
client side could find a suitable certificate. In my case, I used self
sighed certificate for both server side and client side, and I followed
the openssl instruction to install the self signed certificates.

 

Could you give me some hint how can I have TLS auth/encryption with
certificates?

 

Thanks,

Sherman

Reply via email to