[fetchmail-devel] Re: SVN SSL problem?

[Graham W. <bo...@de...>]

On Mon, Sep 13, 2004 at 10:20:18AM +0100, Brian Candler wrote:
> On Sun, Sep 12, 2004 at 12:27:10PM -0400, Rob Funk wrote:
> > Did I miss a change?
> 
> $ openssl s_client -connect decoy.wox.org:443
> CONNECTED(00000003)
> depth=1 /C=US/ST=Texas/L=Dallas/O=decoy.wox.org/CN=Certificate authority/emailAddress=ca...@de...
> verify error:num=19:self signed certificate in certificate chain
> verify return:0
> 15428:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_pkt.c:1052:SSL alert number 40
> 15428:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_lib.c:226:
> $ 
> 
> So this server, whatever it is, is badly broken. (openssl s_client is
> normally quite happy to connect to sites with self-signed certificates)

The server works fine. It is, however, set up to always check client
certificates. I tested using s_client with a client certificate and
everything seemed to work fine.

-- 
gram