On Thu, Dec 22, 2005 at 12:02:24PM -0800, David Schwartz wrote:

> 
> 
> > openssl s_client -connect 10.100.22.96:1500
> 
> > in my embedded system, the SSL_accept returns error code '1', by calling
> > "ERR_error_string(ERR_ssl_error(), NULL)", i got a string:
> 
> > SSL routines:SSL3_GET_RECORD:wrong version number
> 
> You need to figure out which protocol the other end wants and make sure to
> use that. From the error message, it sounds like the other end wants SSLv3,
> so pass the
> '-ssl3' flag to s_client.
> 

The error message is misleading. The SSL should be negotiated correctly.
The problem is reportedly related to use of TLSv1 with compression and
SSL_OP_TLS_BLOCK_PADDING_BUG enabled. That's all I know (if this is
the problem the OP is experiencing).

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to