Shmuel Siegel wrote:
>
> I have tried porting a recent version ( say two weeks old) to a Macintosh. I
> am having problems with certificate verification in ssltest. SSL2
> verification of both server and client certificates works. However for SSL3
> the client complains about the server certificate chain. What are the
> differences between SSL2 and SSL3 that this should happen, or did I have the
> misfortune of picking up a set of files that were in transition.
>
I think I did change a few things around then and there was one snapshot
that was definitely broken.
Also the chain verify code rejected the test chains because they were
invalid: the certificates have been changed in the latest snapshot.
If you still get the error with a recent snapshot and can't see why then
please post the chain and I'll see if its an OpenSSL problem or a
certificate chain problem.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
