I am testing a server that supports encryption without certificates. Build is 0.9.8k. When I test it with 'openssl s_client -connect host:port', openssl throws the following error:
3780:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:.\ssl\s23_clnt.c:596: My SSL server throws the following error: SSL error: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher: . SSL error location: file '.\ssl\s3_srvr.c' line 888. My SSL server uses the following SSL context setup when using DH encryption without certificate authentication: SSL_CTX_set_options( ctx, SSL_OP_ALL ); SSL_CTX_set_tmp_dh_callback( ctx, tmp_dh_callback ); rc = SSL_CTX_set_cipher_list( ctx, "ALL:!LOW:!EXP:!MD5:@STRENGTH" ); Can anyone tell me why s_client throws this error? I have an SSL client that connects successfully to this server. ______________________________ John Hoel Product Author iWave Software, LLC 2611 Internet Blvd., Suite 114 Frisco, Texas 75034 (214) 705-2361 direct (214) 594-5753 fax <jh...@iwavesoftware.com> (866) 924-9283 technical support www.iwavesoftware.com