[Tclhttpd-users] [Fwd: tclhttpd with ssl3]

[Erik L. <e.l...@hc...>]

-------- Original Message --------
Subject: tclhttpd with ssl3
Date: 21 Mar 2005 21:57:28 -0800
From: yah...@XO... (yahalom)
Organization: http://groups.google.com
Newsgroups: comp.lang.tcl

hello

I work with tclhttpd that uses ssl2 with its server certificate
(server.pem skey.pem) and it works fine. I try to make tclhttpd work
with ssl3. I installed a certificate on my computer and changed the
relevant configuration in tclhttpd.rc.
when I browse to my https site I get a prompt from the browser to
select a certificate. when I choose the one I installed (the only one
I have) I am getting "page cannot be displayed".
I am not an expert in the ssl area so I need some clarification.
is there someting more I need to put in the certs directory in order
to make the client authentication work?
how does tclhttpd does the client authentication?

this is what I see when I write arguments that are sent to tls
callback:
info sock11 handshake start {before/accept initialization}
info sock11 accept loop {before/accept initialization}
info sock11 accept loop {SSLv3 read client hello A}
info sock11 accept loop {SSLv3 write server hello A}
info sock11 accept loop {SSLv3 write certificate A}
info sock11 accept loop {SSLv3 write certificate request A}
info sock11 accept loop {SSLv3 flush data}
info sock11 accept exit {SSLv3 read client certificate A}
info sock11 accept exit {SSLv3 read client certificate A}
info sock11 handshake start {before/accept initialization}
info sock11 accept loop {before/accept initialization}
info sock11 accept loop {SSLv3 read client hello A}
info sock11 accept loop {SSLv3 write server hello A}
info sock11 accept loop {SSLv3 write certificate A}
info sock11 accept loop {SSLv3 write certificate request A}
info sock11 accept loop {SSLv3 flush data}
info sock11 accept exit {SSLv3 read client certificate A}
info sock11 accept exit {SSLv3 read client certificate A}