> Thank you!  So it is the *client* that breaks the connection,
      > and it is unhappy either about MiTM, or the encoding. I will
      > check for both (though not much I can do about either).
    
        Presumably you've added that cert to some trust store on the system in 
question.

Yes I did (though reluctantly :).
    
    The support staff for the product should be able to tell you how to 
configure
    trusted TLS CAs, if these are configurable.

Yes, I’m bringing this to them, in hope that they’d resolve it.
    
    If the product is not using OpenSSL, this question really is off topic for
    this list.  If it is using OpenSSL, there may be some place where it looks
    for its CAfile or some CApath directory.

Frankly, I don’t know – to me it’s an executable black-box. I’ll try to dig. 
But I think you’ve provided me with all I need to point our support at the root 
cause.

Thanks!! 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to