Re: Crypt::SSLeay & client certificates

Is this the right list for this question?

Sean Evans wrote on 4/5/2004, 9:22 AM:

 > Good day to everyone,
 >
 > I need to scrape some data from an HTTPS site that requires client
 > certificates for authentication. I am able to access the site with a
 > certificate loaded in Netscape 7.1, so I exported the certificate (there
 > are two actually, one for encrypting and one for signing, not sure if
 > this matters) to PKCS12 and tried the following:
 >
 > __BEGIN__
 > use strict;
 > use LWP::UserAgent;
 > # DEBUGGING SWITCH / LOW LEVEL SSL DIAGNOSTICS
 > $ENV{HTTPS_DEBUG} = 1;
 > # DEFAULT SSL VERSION
 > $ENV{HTTPS_VERSION} = '3';
 >
 > # CLIENT PKCS12 CERT SUPPORT
 > $ENV{HTTPS_PKCS12_FILE}     = 'test.p12';
 > $ENV{HTTPS_PKCS12_PASSWORD} = 'password';
 >
 > my $ua = new LWP::UserAgent;
 > my $req = new HTTP::Request('GET', 'https://example.com');
 > my $res = $ua->request($req);
 > print $res->status_line."\n";
 > __END__
 >
 > Here's the debug output I get:
 >
 > __BEGIN__
 > SSL_connect:before/connect initialization
 > SSL_connect:SSLv3 write client hello A
 > SSL_connect:SSLv3 read server hello A
 > SSL_connect:SSLv3 read server certificate A
 > SSL_connect:SSLv3 read server done A
 > SSL_connect:SSLv3 write client key exchange A
 > SSL_connect:SSLv3 write change cipher spec A
 > SSL_connect:SSLv3 write finished A
 > SSL_connect:SSLv3 flush data
 > SSL_connect:SSLv3 read finished A
 > SSL_connect:SSL renegotiate ciphers
 > SSL_connect:SSLv3 write client hello A
 > SSL_connect:SSLv3 read server hello A
 > SSL_connect:SSLv3 read server certificate A
 > SSL_connect:SSLv3 read server certificate request A
 > SSL_connect:SSLv3 read server done A
 > SSL_connect:SSLv3 write client certificate A
 > SSL_connect:SSLv3 write client key exchange A
 > SSL_connect:SSLv3 write certificate verify A
 > SSL_connect:SSLv3 write change cipher spec A
 > SSL_connect:SSLv3 write finished A
 > SSL_connect:SSLv3 flush data
 > SSL3 alert read:fatal:certificate unknown
 > SSL_connect:failed in SSLv3 read finished A
 > 500 read failed: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert
 > certificate unknown | error:140940E5:SSL routines:SSL3_READ_BYTES:ssl
 > handshake failure
 > __END__
 >
 >
 > I'm running on ActiveState 5.8 using Crypt::SSLeay from theoryx5. Could
 > anyone tell me what I'm doing wrong?
 >
 > --
 > Sean Evans
 >

-- 
Sean Evans
Technical Support
703-265-0397
http://enterprise.aim.com
http://enterprise.netscape.com