Thanks,

i think that it maybe caused by threads conflict and detect had not
implement locking callback

since implemented the following two callback function
CRYPTO_set_id_callback(id_function);
CRYPTO_set_locking_callback(locking_function);
by reference threads.doc. it appear not occur now, and other wrong like
*_cmp exception also eliminate

thanks all




On 7/3/08, doki_pen <[EMAIL PROTECTED]> wrote:
>
> Jinhua Zhu wrote:
>
>> Hello,
>> I'm doing a project using EAP-TTLS for authenticating users,
>> it's run ok when just have a  single access, but when I have
>> more times access continuously there will generate a log
>> "SSL: SSL3 alert: write (local SSL3 detected an error):fatal:bad record
>> mac"
>>
>>
>> context is
>> server has sent it's cert, and then received the EAP-Response which
>> composed
>>
>> with "client key exchange" "change cipher spec" and "Encrypto handshake
>> Message"
>> but occur an error at the moment,
>> --log begin---
>> EAP-TTLS: Received packet(len=204) - Flags 0x00
>> SSL: (where=0x2001 ret=0x1)
>> SSL: SSL_accept:SSLv3 read client key exchange A
>> SSL: (where=0x4008 ret=0x214)
>> SSL: SSL3 alert: write (local SSL3 detected an error):fatal:bad record mac
>> SSL: (where=0x2002 ret=0xffffffff)
>> SSL: SSL_accept:error in SSLv3 read certificate verify A
>> SSL: 7 bytes pending from ssl_out
>> SSL: 7 bytes left to be sent out (of total 7 bytes)
>> --log end---
>> the eap message content is
>> 15 00 15 03 01 00 02 02 14
>>
>> who can give me some suggestion about which situation can induce this
>> result
>> ?
>> i think this packet is correct and ethreal can resolve it well.
>>
>> Thanks a lot
>>
>>
>>
> I had this problem and the only solution was to use TLSv1.  Don't know if
> that helps.
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           [EMAIL PROTECTED]
>



-- 
Jinhua. Zhu
Nanjing,    China
[EMAIL PROTECTED]

Reply via email to