Use: SSL_get_error(ssl, err);
This will give you more information on SSL_connect failure.
err = SSL_connect (ssl);
if (err <=0)
{
int errcode = SSL_get_error(ssl, err);
switch(errcode)
{
case SSL_ERROR_NONE: break; // Cannot happen if err <=0
case SSL_ERROR_ZERO_RETURN: fprintf(stderr,"SSL connect returned
0.");break;
case SSL_ERROR_WANT_READ: fprintf(stderr,"SSL connect: Read
Error.");break;
case SSL_ERROR_WANT_WRITE: fprintf(stderr,"SSL connect: Write
Error.");break;
case SSL_ERROR_WANT_CONNECT: fprintf(stderr,"SSL connect: Error
connect."); break;
case SSL_ERROR_WANT_ACCEPT: fprintf(stderr,"SSL connect: Error
accept."); break;
case SSL_ERROR_WANT_X509_LOOKUP: fprintf(stderr,"SSL connect error:
X509 lookup."); break;
case SSL_ERROR_SYSCALL: fprintf(stderr,"SSL connect: Error in system
call."); break;
case SSL_ERROR_SSL: fprintf(stderr,"SSL connect: Protocol Error.");
break;
default: fprintf(stderr,"Failed SSL connect.");
}
}
Let the group know the result - they we can guide better.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Pjothi
Sent: Tuesday, February 07, 2006 3:53 PM
To: [email protected]
Subject: possible reasons for SSL_connect() failure
Dear all,
I am trying to connect a tls enabled sip client(minisip: latest svn
extracted version) with a tls enabled SIP proxy - OpenSER.(listening
on port:5061). Its a simple LAN scenario.
Problem:
When (minisip) client tries to connect to the server(OpenSER), I get a
SSL_connect() failed exception. As I understand only after
SSL_connect(), the client ever checks the peer certificate. I cannot
understand, what could be the possible reasons for a SSL_connect()
failure. The server machine has Openssl installed (openssl 0.9.7g).
Since its failing and not refused by the server, I am confident it
tries in the correct post 5061 and a TCP socket is also being
established.
kindly let me know what could be the possible reasons of a SSL_connect
failure and suggestions to solve it
thanks and regards,
Pjothi
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
