On Thu, Jul 27, 2000 at 02:43:45PM +0200, Konstantin Agouros wrote:

> I am writing a client-site application using OSSL 0.9.5a.
> It works for most websites but https://homebanking2.sskm.de/banking.html
> There I get a SSL3_GET_RECORD:bad mac decode

That site uses a buggy server -- it does not support TLS 1.0 and does not
properly handle protocol version negotation: s_client can connect if
'-ssl3' or '-no_tls1' is used.  When using '-tls1' (TLSv1_server_method),
then the server just hangs (no response to the client hello).

If you cannot cannot using SSLv23_method, then it can be a good idea
to try again with the SSL_OP_NO_TLSv1 option set.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to