对SSL熟悉的大侠进来看看

garyli0314

client端SSL认证出问题
在服务端的错误信息如下：
SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:s3_pkt.c:1052:SSL alert number 48

我通过命令openssl s_client -showcerts -CAfile cacert.pem -connect 192.168.1.100:1234 的到如下结果：
CONNECTED(00000003)
depth=0 /C=SH/ST=SH/L=SH/O=SH/OU=SH/CN=SH/emailAddress=SH
verify return:1
---
Certificate chain
0 s:/C=SH/ST=SH/L=SH/O=SH/OU=SH/CN=SH/emailAddress=SH
   i:/C=SH/ST=SH/L=SH/O=SH/OU=SH/CN=SH/emailAddress=SH
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=SH/ST=SH/L=SH/O=SH/OU=SH/CN=SH/emailAddress=SH
issuer=/C=SH/ST=SH/L=SH/O=SH/OU=SH/CN=SH/emailAddress=SH
---
No client certificate CA names sent
---
SSL handshake has read 950 bytes and written 328 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES256-SHA
    Session-ID: 79727D12969E23581572DA1EEBCCF814B6BF7675930932CEA6E67A84869C8269
    Session-ID-ctx:
    Master-Key: 97AD1EC3609EB5E6FAD3960930EB9A9E439AC70220DF22CF7AD0B8B13713CBA66FB8479B5F9297AB0407B8B736E62869
    Key-Arg   : None
    Start Time: 1225381509
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
closed

有什么建议吗？

fd1803

联系 www.wosign.com

linternt

No client certificate CA names sent
从这下手吧, 没做过客户端这块的