Which version of OpenSSL on SUSE?  Also important, which version of
which webserver software?  (OpenSSL is not the only SSL toolkit on the
planet; mod_nss exists as well, and that's a different mailing list.)

For troubleshooting, I'd suggest looking into openssl s_client and
s_server.  Load s_server with the key/cert that your webserver is
using, give s_client the certificate and private key file for the
client-auth side.  Read the manpages on them and you'll find a lot of
useful information.

(Also, point your SOAP::Lite client to the s_server, and look at the
chain that it's sending.  It might be sending it with \r instead of
\r\n -- base64 encodes 3 bytes into 4, and at the end of the line it
requires network line endings.  which just happens to match DOS
line-ending format.)

-Kyle H

On Thu, Dec 11, 2008 at 11:14 AM, McGovern, James F (HTSC, IT)
<james.mcgov...@thehartford.com> wrote:
> We are running into an issue with an application that is written in PERL
> using SOAP:Lite and OpenSSL on Suse where a SOAP request is sent to a server
> that requires mutual authentication. On the server side, the server is
> throwing a message indicating that it is having a problem with base64
> decoding the certificate.
>
> We have validated the integrity of the certificates by writing an
> application in Java that doesn't use OpenSSL and it works fine. Any thoughts
> on how to troubleshoot?
>
> ************************************************************
> This communication, including attachments, is for the exclusive use of
> addressee and may contain proprietary, confidential and/or privileged
> information.  If you are not the intended recipient, any use, copying,
> disclosure, dissemination or distribution is strictly prohibited.  If you
> are not the intended recipient, please notify the sender immediately by
> return e-mail, delete this communication and destroy all copies.
> ************************************************************
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to