|
From: | Nikos Mavrogiannopoulos |
Subject: | [sr #107540] iPhone/iPad TLS negotiation to postfix fails with certtool certs, works with openssl certs |
Date: | Sun, 05 Dec 2010 10:09:03 +0000 |
User-agent: | Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Ubuntu/10.04 Chromium/7.0.517.44 Chrome/7.0.517.44 Safari/534.7 |
Follow-up Comment #6, sr #107540 (project gnutls): Ah, sorry I only read the description and left with the impression that only the openssl was there. I've checked the certificates and they are exactly the same except of one thing. The "signature" field of the certificate in certtool which is an AlgorithmIdentifier does not include the parameters option, since there are no parameters, while the openssl certificate includes the NULL encoding. Both are correct, but it seems that client is picky. I'll try to check if there is an easy patch to generate a key that will use NULL encoding to try. _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/support/?107540> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/
[Prev in Thread] | Current Thread | [Next in Thread] |