client certs

Using cli.cpp and serv.cpp as a starting point

I want both the client and server to pass certificates.

I added:

SSL_CTX_set_default_verify_paths(ctx);
SSL_CTX_set_verify( ctx, SSL_VERIFY_PEER|SSL_VERIFY_CLIENT_ONCE, NULL );

to serv.cpp after the call to SSL_CTX_check_private_key(ctx)

Apparently this is causing the server to request the cert during the

handshaking, because now I get an error:

1344:error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate retu
rned:.\ssl\s3_srvr.c:1677:

In cli.cpp I added the two lines between SSL_new () and SSL_set_fd()

ssl = SSL_new (ctx)

SSL_use_certificate_file(ssl, "client.pem", SSL_FILETYPE_PEM)

SSL_use_PrivateKey_file(ssl, "client.pem", SSL_FILETYPE_PEM)

SSL_set_fd (ssl, sd);

Does anybody know what I'm missing that is causing the client

not to send it's certificate?

Reply via email to