[CalendarServer-users] SSL with caldavd

[Gaurav Jain]

Hi,

Thank you for creating caldavd.

I try to configure SSL with Caldavd. I am having issues configuring
SSLAuthortiyChain.

I use positive SSL which gave following file for intermediate chain

AddTrustExternalCARoot.crt

COMODORSAAddTrustCA.crt

COMODORSADomainValidationSecureServerCA.crt


I created a file PositiveSSL.ca-bundle

cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt
 AddTrustExternalCARoot.crt      > PositiveSSL.ca-bundle


    <!-- SSL authority chain (for intermediate certs) -->

    <key>SSLAuthorityChain</key>

    <string>/etc/ssl/myProject/PositiveSSL.ca-bundle</string>


But I get "HandShake Failed" error.

openssl s_client -connect example.com:8443 -CAfile
~/ssl/comodo/PositiveSSL.ca-bundle

CONNECTED(00000003)

41275:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
handshake
failure:/SourceCache/OpenSSL098/OpenSSL098-52.40.1/src/ssl/s23_clnt.c:593:


Would you be able to point me to issue?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/calendarserver-users/attachments/20160327/e062e587/attachment.html>