[CalendarServer-users] SSL problems with 2.3 and trunk under Debian

[Morgen Sagen]

And you have in your caldavd.plist the following plist keys?

    <key>SSLAuthorityChain</key>
    <key>SSLCertificate</key>
    <key>SSLPrivateKey</key>

On Jan 5, 2010, at 8:17 AM, Mark Nipper wrote:

> On 05 Jan 2010, Cyrus Daboo wrote:
>> So openssl was trying the v23 handshake and failing because the
>> server only does v3. Try this:
>> 
>>> openssl s_client -connect host.example.com:8443 -debug -ssl3
> 
> 	A little further:
> ---
> CONNECTED(00000003)
> write to 0xa870f0 [0xa92490] (87 bytes => 87 (0x57))
> 0000 - 16 03 00 00 52 01 00 00-4e 03 00 4b 43 65 e8 5d   ....R...N..KCe.]
> 0010 - aa 9a 76 51 60 a4 3a 24-27 a4 0f a3 0d 69 ed a9   ..vQ`.:$'....i..
> 0020 - a7 1d df 33 c1 40 3e 2d-bc 6d c6 00 00 26 00 39   ...3.@>-.m...&.9
> 0030 - 00 38 00 35 00 16 00 13-00 0a 00 33 00 32 00 2f   .8.5.......3.2./
> 0040 - 00 05 00 04 00 15 00 12-00 09 00 14 00 11 00 08   ................
> 0050 - 00 06 00 03 02 01                                 ......
> 0057 - <SPACES/NULS>
> read from 0xa870f0 [0xa8dc80] (5 bytes => 5 (0x5))
> 0000 - 15 03 00 00 02                                    .....
> read from 0xa870f0 [0xa8dc85] (2 bytes => 2 (0x2))
> 0000 - 02 28                                             .(
> 27443:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1061:SSL alert number 40
> 27443:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:530:
> ---
> 
> -- 
> Mark Nipper
> nipsy at bitgnome.net (XMPP)
> +1 979 575 3193
> -
> Generalizations are usually flawed by exceptions.
> -- seen at http://wunderland.com/
> _______________________________________________
> calendarserver-users mailing list
> calendarserver-users at lists.macosforge.org
> http://lists.macosforge.org/mailman/listinfo.cgi/calendarserver-users