Posted 7/1/2009 5:10:49 AM
|
|
|
|
| Hi, I'm modifying an existing tomcat server to use client authentication. I'm using a self-signed CA to sign both my server and client certificate. When testing the connection using openssl, i get the following errors: C:\OpenSSL\bin>openssl s_client -connect wppan:8443 -cert c:\test\tc5.5\2\client \clientCert.pem -key c:\test\tc5.5\2\client\client.key -CAfile c:\test\tc5.5\2\ca\ca.pem Loading 'screen' into random state - done CONNECTED(00000778) depth=1 /C=MY/ST=Johor/L=Johor Bahru/O=CA Org/OU=CA Unit/CN=my_ca/emailAddress=admin@inforco.com.my verify return:1 depth=0 /C=MY/ST=Johor/L=Johor Bahru/O=Server Organization/OU=Server Unit/CN=wppan verify return:1 3760:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:.\ssl\s3 _pkt.c:1060:SSL alert number 48 3760:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:.\ssl\s23_lib .c:188: My server.xml configuration settings is as follows: <Connector port="8443" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" disableUploadTimeout="true" acceptCount="100" scheme="https" secure="true" protocol="HTTP/1.1" sslProtocol="TLS" SSLEngine="on" SSLCertificateFile="C:\test\tc5.5\2\server\serverCert.pem" SSLCertificateKeyFile="C:\test\tc5.5\2\server\serverExp.key" SSLVerifyClient="require" /> Can u advice me where goes wrong with my settings?
|
|
|
|