[SOLVED] ssl client

sevendogsbsd · 01-17-2020, 10:11 AM

Clients don't need certificates to connect unless the server asks for one. Having said that, they do need to trust the server's cert chain though.

end · 01-17-2020, 10:24 AM

if i remove certs from above server or S_server its the same error with this client.

SoftSprocket · 01-17-2020, 01:24 PM

Quote:

Originally Posted by end

hi with ERR_print_errors_fp(stderr); i get this error

Code:

139896906146304:error:1408F10B:SSL routines:ssl3_get_record:wrong version number

This usually means the handshake failed - some kind of mismatch in protocols maybe. You can look into why handshakes can fail.

Quote:

Originally Posted by end

hi this is client im testing it with

openssl s_server accept 80 --cert /root/mycert.pem -ket /root/mycert.pem

I presume -ket is a typo?

No errors when you run this command?

end · 01-17-2020, 02:02 PM

yes its typo, i can run command

NevemTeve · 01-17-2020, 02:14 PM

The error handling could be improved a bit, e.g.:

Code:

   if ((rett= connect(sockett, (struct sockaddr *)&server, sizeof(struct sockaddr_in))) < 0)
   {
     printf("connect(%d) failed, errno: %d %s\n",sockett, errno, strerror(errno));
     exit (2);
   }

Also please change this:

Code:

old: if(SSL_set_fd(ssl, rett)<=0)
new: if(SSL_set_fd(ssl, sockett)<=0)

Plus, please read this again and again, until you've learnt it by heart: https://www.cs.umd.edu/~srhuang/teac...al-handout.pdf

end · 01-17-2020, 02:59 PM

Code:

old: if(SSL_set_fd(ssl, rett)<=0)
new: if(SSL_set_fd(ssl, sockett)<=0)

Solved thank you man. Finaly. i learn about error handling like i newer think iwill did.