Newer releases of OpenSSL return X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT instead of X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY

Joe Orton joe at manyfish.co.uk
Thu Jan 7 09:00:12 EST 2010


On Thu, Jan 07, 2010 at 12:59:01PM +0100, Helge Heß wrote:
> When building against 0.28.5/OpenSSL 0.9.8k, HTTPS works just fine for me.
> When using 0.29.2/OpenSSL 0.9.8l (or .1 or .0, I think), I get an:
> 
>   SSL handshake failed: Secure connection truncated
> 
> against a Twisted server. Non-SSL HTTP works just fine.

Does this build work with other SSL servers, or is the problem specific 
to that SSL server?

Does neon 0.29.x built against OpenSSL 0.9.8k work against that server?

OpenSSL 0.9.8l disables renegotiation, though I'd be surprised if the 
indicated usage below triggers a renegotiation.

Regards, Joe



More information about the neon mailing list