I am testing a server that supports encryption without certificates. Build is 
0.9.8k. When I test it with 'openssl s_client -connect host:port', openssl 
throws the following error:

3780:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake 
failure:.\ssl\s23_clnt.c:596:

My SSL server throws the following error:

SSL error: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher: .
SSL error location: file '.\ssl\s3_srvr.c'  line 888.

My SSL server uses the following SSL context setup when using DH encryption 
without certificate authentication:

      SSL_CTX_set_options( ctx, SSL_OP_ALL );
      SSL_CTX_set_tmp_dh_callback( ctx, tmp_dh_callback );
      rc = SSL_CTX_set_cipher_list( ctx, "ALL:!LOW:!EXP:!MD5:@STRENGTH" );

Can anyone tell me why s_client throws this error?

I have an SSL client that connects successfully to this server.

______________________________

John Hoel
Product Author

iWave Software, LLC
2611 Internet Blvd., Suite 114
Frisco, Texas 75034

(214) 705-2361 direct
(214) 594-5753 fax
<jh...@iwavesoftware.com>

(866) 924-9283 technical support
www.iwavesoftware.com


Reply via email to