Hi All,

I used https://thrift.apache.org/test/keys to create there .pem files
CA.pem, server.pem and client.pem

Now on server side for TSSLServerSocket certfile parameter I am using
server.pem
and on client side for TSSLSocket ca_certs do i need to use client.pem or
CA.pem?

If i use CA.pem it works fine but if I use client.pem I am getting

Could not connect to localhost:xxxx: [Errno 1] _ssl.c:499:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify
failed

Can someone please point me to some document which explains things in
details.


Nitin K

Reply via email to