On Thu, Jul 27, 2000 at 02:43:45PM +0200, Konstantin Agouros wrote: > I am writing a client-site application using OSSL 0.9.5a. > It works for most websites but https://homebanking2.sskm.de/banking.html > There I get a SSL3_GET_RECORD:bad mac decode That site uses a buggy server -- it does not support TLS 1.0 and does not properly handle protocol version negotation: s_client can connect if '-ssl3' or '-no_tls1' is used. When using '-tls1' (TLSv1_server_method), then the server just hangs (no response to the client hello). If you cannot cannot using SSLv23_method, then it can be a good idea to try again with the SSL_OP_NO_TLSv1 option set. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]