maybe s_client can go on without CA cert, but the s_server need one,
otherwise it will exit at
"if ((!SSL_CTX_load_verify_locations(ctx,CAfile,CApath)) ||
  (!SSL_CTX_set_default_verify_paths(ctx)))"(line634 of s_server)
I should offer a CAfile option for s_server, so that it can begin to
accept connection.But what is the CAfile for server.pem?

Holger Reif wrote:

>
> No, s_client gives a warning about the CA cert not
> accessible but you can connect after that w/o problems.
>
> --
> Holger Reif                  Tel.: +49 361 74707-0
> SmartRing GmbH               Fax.: +49 361 7470720
> Europaplatz 5             [EMAIL PROTECTED]
> D-99091 Erfurt                    WWW.SmartRing.de
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to