Hello Tititorn,
OpenSSL 0.9.4 didn't support the 'Fast SGC' Microsoft uses
when upgrading to stronger crypto. Stephen Henson recently
changed OpenSSL to support it. You should try one of the
latest builds of OpenSSL.
As a proof of concept, https://sgctest.globalsign.net uses
a GlobalSign SGC cert and runs Apache/mod_ssl and a later
build of OpenSSL than the official 0.9.4 release.
Good luck!
Christian.
_____________________________________________
Christian Buysschaert mailto:[EMAIL PROTECTED]
GlobalSign nv-sa http://www.globalsign.net
Get Your FREE Class 1 Demo Certificate at
http://www.globalsign.net/wizard/index.htm
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Monday, February 21, 2000 1:32 PM
Subject: [BugDB] Thawte-SGC 128-Certificate (PR#344)
> Full_Name: Tititorn Semangern
> Version: 2.5.0
> OS: Linux Redhat 6.0
> Submission from: (NULL) (203.149.52.11)
>
>
> Dear sir,
>
> I'm using apache_1.3.11+mod_php-3.0.14+mod_ssl-2.5.0 with Openssl
0.9.4 on
> Linux Redhat 6.0. I tries the test 128bit SGC certificate from Thawte. I
got
> these error msg from ssl_engine_log. I'm using MSIE 4.0.
>
> [21/Feb/2000 19:01:59 07256] [info] Init: (hornbill.scb.co.th:443)RSA
server
> certificate enables Server Gated Cryptography (SGC)
> [21/Feb/2000 19:02:24 07257] [info] Connection to child 0 established
(server
> hornbill.scb.co.th:443, client 10.2.11.33)
> [21/Feb/2000 19:02:25 07257] [error] SSL handshake failed (server
> hornbill.scb.co.th:443, client 10.2.11.33) (OpenSSL library error follows)
> [21/Feb/2000 19:02:25 07257] [error] OpenSSL: error:14089106:SSL
> routines:SSL3_GET_CLIENT_CERTIFICATE:wrong message type
> [21/Feb/2000 19:02:43 07258] [info] Connection to child 1 established
(server
> hornbill.scb.co.th:443, client 10.2.11.33)
> [21/Feb/2000 19:02:44 07258] [error] SSL handshake failed (server
> hornbill.scb.co.th:443, client 10.2.11.33) (OpenSSL library error follows)
> [21/Feb/2000 19:02:44 07258] [error] OpenSSL: error:14089106:SSL
> routines:SSL3_GET_CLIENT_CERTIFICATE:wrong message type
>
> Thank you.
>
> Tititorn
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
