i will elaborate, for

X509_get_subject_name(issuer) = " CN = nc-win2008x64.americas.prog.com , OU
= QA , O = DD , L = Morrisville, S = NC , C = US"

X509_get_issuer_name(subject) = "Issue:- CN = nc-panthers , DC = sso, DC =
raldev, DC = com"

This is causing subject name and issuer name mismatch. Any inputs what
should be the correct way for chained certificates.

-mithun





On Thu, Aug 9, 2012 at 2:15 AM, Mithun Kumar <[email protected]> wrote:

>
>
> Thanks for the quick reply , Can you please elaborate?
>
>
>
>
> On Thu, Aug 9, 2012 at 1:53 AM, Ryan Hurst <[email protected]>wrote:
>
>> I think the only cases you will get this are:
>> A. Name miss match in certificates exist, it's a binary compare so then
>> smallest change can cause this.
>>
>> B. key miss match, name looks good bit keys are bit as expected.
>>
>> Ryan
>> Sent from my iPhone
>>
>> On Aug 9, 2012, at 4:18 AM, Mithun Kumar <[email protected]> wrote:
>>
>> Hello All,
>>
>> I am trying working on getting my client connected to Microsoft SQL
>> Server. Handshake fails after server hello. I keep getting error Subject
>> Issuer Mismatch
>> *
>> int X509_check_issued(X509 *issuer, X509 *subject)
>> {
>>     if(X509_NAME_cmp(X509_get_subject_name(issuer),
>>             X509_get_issuer_name(subject)))
>>                 return X509_V_ERR_SUBJECT_ISSUER_MISMATCH;*
>>
>>
>>
>>
>> Here are my certificate chain details
>>
>> Root Certificate----
>>
>> Subject Name:- CN = nc-panthers , DC = sso, DC = raldev, DC = com
>>
>> Issuer Name :- CN = nc-panthers , DC = sso , DC = raldev , DC = com
>>
>>
>> ---------------------------------------------------
>>
>>
>> Client certificate which is signed by root certificate.
>>
>>
>> Subject Name :-  CN = nc-win2008x64.americas.prog.com , OU = QA , O = DD
>> , L = Morrisville, S = NC , C = US
>>
>> Issue Name :- CN = nc-panthers , DC = sso, DC = raldev, DC = com
>>
>>
>> I am confused, is the chain broken?  Any inputs will be of great help
>>
>> -mithun
>>
>>
>>
>>
>

Reply via email to