Client Authentication > SSL alert number 48

wppanjb — Wed, 01 Jul 2009 05:10:49 GMT

Hi,

I'm modifying an existing tomcat server to use client authentication.

I'm using a self-signed CA to sign both my server and client certificate. When testing the connection using openssl, i get the following errors:

C:\OpenSSL\bin>openssl s_client -connect wppan:8443 -cert c:\test\tc5.5\2\client
\clientCert.pem -key c:\test\tc5.5\2\client\client.key -CAfile c:\test\tc5.5\2\ca\ca.pem
Loading 'screen' into random state - done
CONNECTED(00000778)
depth=1 /C=MY/ST=Johor/L=Johor Bahru/O=CA Org/OU=CA Unit/CN=my_ca/emailAddress=admin@inforco.com.my
verify return:1
depth=0 /C=MY/ST=Johor/L=Johor Bahru/O=Server Organization/OU=Server Unit/CN=wppan
verify return:1
3760:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:.\ssl\s3
_pkt.c:1060:SSL alert number 48
3760:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:.\ssl\s23_lib
.c:188:

My server.xml configuration settings is as follows:

<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
protocol="HTTP/1.1"
sslProtocol="TLS"
SSLEngine="on"
SSLCertificateFile="C:\test\tc5.5\2\server\serverCert.pem"
SSLCertificateKeyFile="C:\test\tc5.5\2\server\serverExp.key"
SSLVerifyClient="require"

Can u advice me where goes wrong with my settings?

SSL Forums / SSL Certificates / Community Support / Client Authentication > SSL alert number 48 / Latest Posts

Client Authentication > SSL alert number 48