[CalendarServer-users] Configuring SSL with CA certs

Pascal Dallaire pascaldallaire at cre-gim.net
Sun Feb 9 06:41:22 PST 2014


Hello to the list,

Running CalendarServer 4.2 on Snow Leopard, using the supplied SSL certificates that’s self-signed and expired. I tried to change to a CA certificate with information in plist about SSLCertificate, SSLAuthorityChain and SSLPrivateKey. The exact same files work a charm in Apache, but when trying in CalendarServer, I get an SSL handshake error : 
-----
openssl s_client -connect mycalserver:8443
CONNECTED(00000003)
45947:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/SourceCache/OpenSSL098/OpenSSL098-50/src/ssl/s23_lib.c:182:
-----
openssl s_client -connect mycalserver:8443 -servername realnameofcalserver
CONNECTED(00000003)
45960:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:/SourceCache/OpenSSL098/OpenSSL098-50/src/ssl/s23_clnt.c:602:
-----
I don’t know the problem here… This certificate was issued with a CSR made from the default OpenSSL on Snow Leopard (0.98r)

Thanks whoever who could help
Pascal


More information about the calendarserver-users mailing list