wolfSSL - Embedded SSL Library — error -144 ASN_OBJECT_ID_E /* invalid id */

Re: error -144 ASN_OBJECT_ID_E /* invalid id */

null@example.com (chrisc) — Mon, 16 May 2011 22:10:42 +0000

Could you tell me a little more about the chain you are trying to verify, and the CA certs you are loading? Such as:

- Structure of your server certificate
- Does your CA certificate file which you are loading contain only a single CA cert?
- If so, is it signed by anyone else (another CA)?

Thanks,
Chris

Re: error -144 ASN_OBJECT_ID_E /* invalid id */

null@example.com (j3g) — Fri, 13 May 2011 22:55:04 +0000

sadly i'm running 1.8 because I've made serious modifications to get cyassl embedded SSL running in a non-standard environment. I want to get 1.8 ported and running, then update to 2.0. Mainly because of those pesky deadlines

Can you describe what the error is intended to mean? Looking at 2.0 source it gives a little more clarrification from this line of code

CYASSL_MSG("No CA signer to verify with");

I am running cyassl as a client. Maybe I missed a step of loading a CA. My code is loading one cert as the CA cert during the CyaSSL_CTX_load_verify_buffer(). Is it possible my CA PEM is incomplete?

My CA loading code:

CyaSSL_CTX_load_verify_buffer(ctx, caCertBuffer, caCertBufferSize, SSL_FILETYPE_PEM)

Maybe I am fundamentally doing something wrong. Any insight?

Re: error -144 ASN_OBJECT_ID_E /* invalid id */

null@example.com (chrisc) — Fri, 13 May 2011 19:48:44 +0000

Are you using the most current version of CyaSSL (2.0)? We changed several things in 2.0 as far as certificate handling. Let me know if you still get the error with 2.0.

- Chris

Re: error -144 ASN_OBJECT_ID_E /* invalid id */

null@example.com (j3g) — Fri, 13 May 2011 15:02:52 +0000

update. I created a new certificate and key (the previous cert had been generated by a co-worker). I got past the previous problem.

I now get an error of ASN_SIG_CONFIRM_E (-155).

Re: error -144 ASN_OBJECT_ID_E /* invalid id */

null@example.com (j3g) — Thu, 12 May 2011 18:05:09 +0000

are there tools that can verify a certificate is valid and void of any errors?

Re: error -144 ASN_OBJECT_ID_E /* invalid id */

null@example.com (chrisc) — Wed, 11 May 2011 17:34:39 +0000

Hi j3g,

Have you checked the value you are getting for "b" in GetName()? CyaSSL is expecting the tag 0x06 (ASN_OBJECT_ID).

Is the server you are testing against public? If not, could you send the server certificate and server key you are using to support@yassl.com?

Thanks,
Chris

error -144 ASN_OBJECT_ID_E /* invalid id */

null@example.com (j3g) — Tue, 10 May 2011 21:53:41 +0000

during the SSL handshake I am receiving this error.

error -144 ASN_OBJECT_ID_E  /* invalid id */

it appears to throw the error in asn.c GetName().

Seen this before? any suggestions to troubleshoot?