SSL Forums
 Home          Members          Who's On

Welcome Guest ( Login | Register )
        



Client Authentication > SSL alert number... Expand / Collapse
Message
Posted 7/1/2009 5:10:49 AM Post #278
 

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie
Hi,

I'm modifying an existing tomcat server to use client authentication.

I'm using a self-signed CA to sign both my server and client certificate. When testing the connection using openssl, i get the following errors:

C:\OpenSSL\bin>openssl s_client -connect wppan:8443 -cert c:\test\tc5.5\2\client
\clientCert.pem -key c:\test\tc5.5\2\client\client.key -CAfile c:\test\tc5.5\2\ca\ca.pem
Loading 'screen' into random state - done
CONNECTED(00000778)
depth=1 /C=MY/ST=Johor/L=Johor Bahru/O=CA Org/OU=CA Unit/CN=my_ca/emailAddress=admin@inforco.com.my
verify return:1
depth=0 /C=MY/ST=Johor/L=Johor Bahru/O=Server Organization/OU=Server Unit/CN=wppan
verify return:1
3760:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:.\ssl\s3
_pkt.c:1060:SSL alert number 48
3760:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:.\ssl\s23_lib
.c:188:

My server.xml configuration settings is as follows:

    <Connector port="8443" maxHttpHeaderSize="8192"
               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" scheme="https" secure="true"
    protocol="HTTP/1.1"
      sslProtocol="TLS"
    SSLEngine="on"
    SSLCertificateFile="C:\test\tc5.5\2\server\serverCert.pem"
    SSLCertificateKeyFile="C:\test\tc5.5\2\server\serverExp.key"
    SSLVerifyClient="require"  

     
        
      />

Can u advice me where goes wrong with my settings?

« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -6:00, Time now is 5:06am


SSL.com Knowledge Base. Copyright © 2003-2009