<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title><![CDATA[wolfSSL - Embedded SSL Library — cannot connect]]></title>
		<link>https://www.wolfssl.com/forums/topic2215-cannot-connect.html</link>
		<atom:link href="https://www.wolfssl.com/forums/feed-rss-topic2215.xml" rel="self" type="application/rss+xml" />
		<description><![CDATA[The most recent posts in cannot connect.]]></description>
		<lastBuildDate>Tue, 05 Nov 2024 21:49:31 +0000</lastBuildDate>
		<generator>PunBB</generator>
		<item>
			<title><![CDATA[Re: cannot connect]]></title>
			<link>https://www.wolfssl.com/forums/post8023.html#p8023</link>
			<description><![CDATA[<p>I&#039;m glad to hear you were able to get your connection working.<br />Check out our documentation on static memory here: <a href="https://www.wolfssl.com/docs/static-buffer-allocation/">https://www.wolfssl.com/docs/static-buffer-allocation/</a></p>]]></description>
			<author><![CDATA[null@example.com (kareem_wolfssl)]]></author>
			<pubDate>Tue, 05 Nov 2024 21:49:31 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post8023.html#p8023</guid>
		</item>
		<item>
			<title><![CDATA[Re: cannot connect]]></title>
			<link>https://www.wolfssl.com/forums/post8022.html#p8022</link>
			<description><![CDATA[<p>Hallo, I changed my cipherlist and the connection works. A question, where can I found enough complete documentation on how to use STATIC_MEMORY define?</p>]]></description>
			<author><![CDATA[null@example.com (isabella)]]></author>
			<pubDate>Tue, 05 Nov 2024 15:58:34 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post8022.html#p8022</guid>
		</item>
		<item>
			<title><![CDATA[Re: cannot connect]]></title>
			<link>https://www.wolfssl.com/forums/post8020.html#p8020</link>
			<description><![CDATA[<p>Hi Isabella,</p><p>-188/Unknown CA means you are loading the wrong CA cert for the server you are trying to connect to.&nbsp; You can confirm you&#039;re loading the correct CA cert by connecting with your browser and checking the security/cert chain info there.</p><p>Note that since you are using static memory, you must pass in a buffer to functions like wolfSSL_X509_NAME_oneline.</p><p>Thanks,<br />Kareem</p>]]></description>
			<author><![CDATA[null@example.com (kareem_wolfssl)]]></author>
			<pubDate>Mon, 04 Nov 2024 22:19:02 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post8020.html#p8020</guid>
		</item>
		<item>
			<title><![CDATA[cannot connect]]></title>
			<link>https://www.wolfssl.com/forums/post8016.html#p8016</link>
			<description><![CDATA[<p>Hallo, I&#039;m new with wolfssl.<br />I followed the client example. <br />This is my sequence of instructions (taken from client example)</p><p>****************<br />wolfSSL_Init();<br />&nbsp; &nbsp; if (wc_LoadStaticMemory(&amp;heap, memory, sizeof(memory), WOLFMEM_GENERAL, 1)<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; != 0) {<br />&nbsp; &nbsp; &nbsp; &nbsp; err_sys(&quot;unable to load static memory&quot;);<br />&nbsp; &nbsp; }<br />&nbsp; &nbsp; method = wolfTLSv1_2_client_method_ex;<br />&nbsp; &nbsp; ctx = wolfSSL_CTX_new_ex(method(heap), heap);<br />&nbsp; &nbsp;&nbsp; &nbsp; &nbsp;if (wolfSSL_CTX_load_static_memory(&amp;ctx, NULL, memoryIO, sizeof(memoryIO),<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;WOLFMEM_IO_POOL_FIXED | WOLFMEM_TRACK_STATS, 1) != WOLFSSL_SUCCESS) {<br />&nbsp; &nbsp; &nbsp; &nbsp; err_sys(&quot;unable to load static memory&quot;);<br />&nbsp; &nbsp; }<br />&nbsp; &nbsp;&nbsp; &nbsp; &nbsp;if (wolfSSL_CTX_SetMinDhKey_Sz(ctx, (word16)minDhKeyBits)<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; != WOLFSSL_SUCCESS) {<br />&nbsp; &nbsp; &nbsp; &nbsp; err_sys(&quot;Error setting minimum DH key size&quot;);<br />&nbsp; &nbsp; }<br />&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;const char* staticCipherList = &quot;AES128-SHA:ECDH-ECDSA-AES128-SHA&quot;;<br />&nbsp; &nbsp; &nbsp; &nbsp; if (wolfSSL_CTX_set_cipher_list(ctx, staticCipherList) != WOLFSSL_SUCCESS) {<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; wolfSSL_CTX_free(ctx); ctx = NULL;<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; err_sys(&quot;client can&#039;t set cipher list 3&quot;);<br />&nbsp; &nbsp; &nbsp; &nbsp; }<br />&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (wolfSSL_CTX_use_certificate_chain_file_format(ctx, ourCert, fileFormat)<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;!= WOLFSSL_SUCCESS) {<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; wolfSSL_CTX_free(ctx); ctx = NULL;<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; err_sys(&quot;can&#039;t load client cert file, check file and run from&quot;<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &quot; wolfSSL home dir&quot;);<br />&nbsp; &nbsp; &nbsp; &nbsp; }<br />&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (wolfSSL_CTX_use_PrivateKey_file(ctx, ourKey, fileFormat)<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;!= WOLFSSL_SUCCESS) {<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; wolfSSL_CTX_free(ctx); ctx = NULL;<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; err_sys(&quot;can&#039;t load client private key file, check file and run &quot;<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &quot;from wolfSSL home dir&quot;);<br />&nbsp; &nbsp; &nbsp; &nbsp; }<br />&nbsp; &nbsp; &nbsp; &nbsp; if (wolfSSL_CTX_load_verify_locations_ex(ctx, verifyCert, 0, verify_flags)<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;!= WOLFSSL_SUCCESS) {<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; wolfSSL_CTX_free(ctx); ctx = NULL;<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; err_sys(&quot;can&#039;t load ca file, Please run from wolfSSL home dir&quot;);<br />&nbsp; &nbsp; &nbsp; &nbsp; }<br />&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp;if (wolfSSL_CTX_get_read_ahead(ctx) != 0) {<br />&nbsp; &nbsp; &nbsp; &nbsp; wolfSSL_CTX_free(ctx); ctx = NULL;<br />&nbsp; &nbsp; &nbsp; &nbsp; err_sys(&quot;bad read ahead default value&quot;);<br />&nbsp; &nbsp; }<br />&nbsp; &nbsp; if (wolfSSL_CTX_set_read_ahead(ctx, 1) != WOLFSSL_SUCCESS) {<br />&nbsp; &nbsp; &nbsp; &nbsp; wolfSSL_CTX_free(ctx); ctx = NULL;<br />&nbsp; &nbsp; &nbsp; &nbsp; err_sys(&quot;error setting read ahead value&quot;);<br />&nbsp; &nbsp; }<br />&nbsp; &nbsp; &nbsp; &nbsp; <br />&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; ssl = wolfSSL_new(ctx);<br /> if (ssl == NULL) {<br />&nbsp; &nbsp; &nbsp;wolfSSL_CTX_free(ctx); ctx = NULL;<br />&nbsp; &nbsp; &nbsp;err_sys(&quot;unable to get SSL object&quot;);<br /> }<br />&nbsp; &nbsp; if (wolfSSL_CTX_UseSNI(ctx, WOLFSSL_SNI_HOST_NAME, sniHostName,<br />&nbsp; &nbsp; &nbsp; &nbsp; (word16)XSTRLEN(sniHostName)) != WOLFSSL_SUCCESS) {<br />&nbsp; &nbsp; &nbsp; &nbsp; wolfSSL_CTX_free(ctx);<br />&nbsp; &nbsp; &nbsp; &nbsp; ctx = NULL;<br />&nbsp; &nbsp; }<br /> wolfSSL_KeepArrays(ssl);<br /> wolfSSL_NoKeyShares(ssl);<br /> if (wolfSSL_UseSecureRenegotiation(ssl) != WOLFSSL_SUCCESS) {<br />&nbsp; &nbsp; wolfSSL_free(ssl); ssl = NULL;<br />&nbsp; &nbsp; CloseSocket(sockfd);<br />&nbsp; &nbsp; wolfSSL_CTX_free(ctx); ctx = NULL;<br />&nbsp; &nbsp; err_sys(&quot;can&#039;t enable secure renegotiation&quot;);<br />}<br />&nbsp; &nbsp; &nbsp; &nbsp; tcp_set_nonblocking(&amp;sockfd);<br />&nbsp; &nbsp; &nbsp; &nbsp; ret = NonBlockingSSL_Connect(ssl);<br />*******************************************************<br />but ret=-1 with errors=-188</p><p>This is the trace:<br />wolfSSL Entering wolfSSL_Init<br />wolfSSL Entering wolfCrypt_Init<br />RNG_HEALTH_TEST_CHECK_SIZE = 128<br />sizeof(seedB_data)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= 128<br />static memory management size = 16<br />wolfSSL Entering wolfSSL_StaticBufferSz_ex<br />wolfSSL Leaving wolfSSL_StaticBufferSz_ex, return 319964<br />calculated optimum general buffer size = 319964<br />wolfSSL Entering wolfSSL_StaticBufferSz_ex<br />wolfSSL Leaving wolfSSL_StaticBufferSz_ex, return 34024<br />calculated optimum IO buffer size&nbsp; &nbsp; &nbsp; = 34024<br />wolfSSL Entering wc_LoadStaticMemory<br />wolfSSL Entering wc_LoadStaticMemory_ex<br />wolfSSL Entering wc_partition_static_memory<br />wolfSSL Leaving wc_LoadStaticMemory, return 0<br />wolfSSL Entering TLSv1_2_client_method_ex<br />wolfSSL Entering wolfSSL_CTX_new_ex<br />wolfSSL Entering wolfSSL_CertManagerNew<br />heap param = 008B1130<br />DYNAMIC_TYPE_CERT_MANAGER Allocating = 124 bytes<br />wolfSSL Leaving wolfSSL_CTX_new_ex, return 0<br />wolfSSL Entering wc_LoadStaticMemory<br />wolfSSL Entering wc_LoadStaticMemory_ex<br />wolfSSL Entering wc_partition_static_memory<br />wolfSSL Leaving wc_LoadStaticMemory, return 0<br />wolfSSL Entering wolfSSL_CTX_set_default_passwd_cb<br />wolfSSL Entering wolfSSL_CTX_set_cipher_list<br />Warning suites-&gt;suiteSz = 0 set to WOLFSSL_MAX_SUITE_SZ<br />wolfSSL Entering wolfSSL_CTX_use_certificate_chain_file_format<br />wolfSSL Entering ProcessBuffer<br />wolfSSL Entering PemToDer<br />wolfSSL Entering ProcessUserChain<br />Already consumed data<br />wolfSSL Leaving ProcessUserChain, return 0<br />Checking cert signature type<br />Getting Cert Name<br />wolfSSL Entering wolfSSL_X509_NAME_new_ex<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />Unknown encoding type, default UTF8<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />Getting Cert Name<br />wolfSSL Entering wolfSSL_X509_NAME_new_ex<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />Unknown encoding type, default UTF8<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering GetAlgoId<br />Cert signature not supported<br />wolfSSL Entering wolfSSL_X509_NAME_free<br />wolfSSL Entering wolfSSL_X509_NAME_free<br />wolfSSL Leaving ProcessBuffer, return 1<br />wolfSSL Entering wolfSSL_CTX_use_PrivateKey_file<br />wolfSSL Entering ProcessBuffer<br />wolfSSL Entering PemToDer<br />wolfSSL Leaving ProcessBuffer, return 1<br />wolfSSL Entering wolfSSL_CTX_set_verify<br />Before creating SSL<br />wolfSSL Entering wolfSSL_CTX_is_static_memory<br />Total mallocs&nbsp; &nbsp;= 13<br />Total frees&nbsp; &nbsp; &nbsp;= 4<br />Current mallocs = 9<br />Available IO&nbsp; &nbsp; = 2<br />Max con. handshakes&nbsp; = 1<br />Max con. IO&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = 1<br />State of memory blocks: size&nbsp; &nbsp;: available<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 64&nbsp; &nbsp; &nbsp; &nbsp;: 146<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 128&nbsp; &nbsp; &nbsp; : 30<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 256&nbsp; &nbsp; &nbsp; : 18<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 512&nbsp; &nbsp; &nbsp; : 39<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 1024&nbsp; &nbsp; &nbsp;: 16<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 2432&nbsp; &nbsp; &nbsp;: 19<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 3456&nbsp; &nbsp; &nbsp;: 36<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 4544&nbsp; &nbsp; &nbsp;: 4<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 16128&nbsp; &nbsp; : 4<br />wolfSSL Entering wolfSSL_new<br />Setting fixed IO for SSL<br />Setting fixed IO for SSL<br />wolfSSL Entering ReinitSSL<br />RNG_HEALTH_TEST_CHECK_SIZE = 128<br />sizeof(seedB_data)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;= 128<br />wolfSSL Entering SetSSL_CTX<br />wolfSSL Entering wolfSSL_NewSession<br />InitSSL done. return 0 (success)<br />wolfSSL_new InitSSL success<br />wolfSSL Leaving wolfSSL_new InitSSL =, return 0<br />After creating SSL<br />wolfSSL Entering wolfSSL_CTX_is_static_memory<br />Total mallocs&nbsp; &nbsp;= 26<br />Total frees&nbsp; &nbsp; &nbsp;= 4<br />Current mallocs = 22<br />Available IO&nbsp; &nbsp; = 0<br />Max con. handshakes&nbsp; = 1<br />Max con. IO&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; = 1<br />State of memory blocks: size&nbsp; &nbsp;: available<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 64&nbsp; &nbsp; &nbsp; &nbsp;: 140<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 128&nbsp; &nbsp; &nbsp; : 29<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 256&nbsp; &nbsp; &nbsp; : 16<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 512&nbsp; &nbsp; &nbsp; : 37<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 1024&nbsp; &nbsp; &nbsp;: 16<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 2432&nbsp; &nbsp; &nbsp;: 18<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 3456&nbsp; &nbsp; &nbsp;: 36<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 4544&nbsp; &nbsp; &nbsp;: 4<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; : 16128&nbsp; &nbsp; : 3<br />wolfSSL Entering wolfSSL_set_fd<br />wolfSSL Entering wolfSSL_set_read_fd<br />wolfSSL Leaving wolfSSL_set_read_fd, return 1<br />wolfSSL Entering wolfSSL_set_write_fd<br />wolfSSL Leaving wolfSSL_set_write_fd, return 1<br />TLS 1.2 or lower<br />wolfSSL Entering wolfSSL_connect<br />wolfSSL Entering ReinitSSL<br />wolfSSL Entering RetrySendAlert<br />wolfSSL Entering SendClientHello<br />Adding signature algorithms extension<br />growing output buffer<br />Signature Algorithms extension to write<br />Point Formats extension to write<br />Supported Groups extension to write<br />SNI extension to write<br />EMS extension to write<br />Shrinking output buffer<br />wolfSSL Leaving SendClientHello, return 0<br />connect state: CLIENT_HELLO_SENT<br />Server state up to needed state.<br />Progressing server state...<br />ProcessReply...<br />wolfSSL Entering RetrySendAlert<br />Embed Receive error<br />&nbsp; &nbsp; &nbsp; &nbsp; Would block<br />wolfSSL error occurred, error = -323<br />wolfSSL Entering wolfSSL_get_error<br />wolfSSL Leaving wolfSSL_get_error, return -323<br />wolfSSL Entering wolfSSL_get_fd<br />wolfSSL Leaving wolfSSL_get_fd, return 640<br />... client would read block<br />TLS 1.2 or lower<br />wolfSSL Entering wolfSSL_connect<br />wolfSSL Entering ReinitSSL<br />wolfSSL Entering RetrySendAlert<br />Server state up to needed state.<br />Progressing server state...<br />ProcessReply...<br />wolfSSL Entering RetrySendAlert<br />growing input buffer<br />received record layer msg<br />got HANDSHAKE<br />wolfSSL Entering DoHandShakeMsg<br />wolfSSL Entering EarlySanityCheckMsgReceived<br />wolfSSL Leaving EarlySanityCheckMsgReceived, return 0<br />wolfSSL Entering DoHandShakeMsgType<br />processing server hello<br />wolfSSL Entering DoServerHello<br />Extended Master Secret extension received<br />wolfSSL Entering wolfSSL_get_options<br />wolfSSL Entering wolfSSL_get_options<br />wolfSSL Entering VerifyClientSuite<br />wolfSSL Leaving DoServerHello, return 0<br />wolfSSL Leaving DoHandShakeMsgType(), return 0<br />wolfSSL Leaving DoHandShakeMsg(), return 0<br />Shrinking input buffer<br />ProcessReply done.<br />Progressing server state...<br />ProcessReply...<br />wolfSSL Entering RetrySendAlert<br />growing input buffer<br />received record layer msg<br />got HANDSHAKE<br />wolfSSL Entering DoHandShakeMsg<br />wolfSSL Entering EarlySanityCheckMsgReceived<br />wolfSSL Leaving EarlySanityCheckMsgReceived, return 0<br />wolfSSL Entering DoHandShakeMsgType<br />processing certificate<br />wolfSSL Entering DoCertificate<br />wolfSSL Entering ProcessPeerCerts<br />Loading peer&#039;s cert chain<br />&nbsp; &nbsp; &nbsp; &nbsp; Put another cert into chain<br />Getting Cert Name<br />wolfSSL Entering wolfSSL_X509_NAME_new_ex<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />Getting Cert Name<br />wolfSSL Entering wolfSSL_X509_NAME_new_ex<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering GetAlgoId<br />wolfSSL Entering DecodeCertExtensions<br />wolfSSL Entering DecodeKeyUsage<br />wolfSSL Entering DecodeExtKeyUsage<br />wolfSSL Entering DecodeBasicCaConstraint<br />wolfSSL Entering DecodeSubjKeyId<br />wolfSSL Entering DecodeAuthKeyId<br />wolfSSL Entering DecodeAuthInfo<br />wolfSSL Entering DecodeAltNames<br />Certificate Policy extension not supported.<br />wolfSSL Entering wolfSSL_X509_NAME_free<br />wolfSSL Entering wolfSSL_X509_NAME_free<br />Verifying Peer&#039;s cert<br />Getting Cert Name<br />wolfSSL Entering wolfSSL_X509_NAME_new_ex<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />Getting Cert Name<br />wolfSSL Entering wolfSSL_X509_NAME_new_ex<br />wolfSSL Entering wolfSSL_X509_NAME_add_entry_by_NID<br />Found place for name entry<br />wolfSSL Entering wolfSSL_X509_NAME_ENTRY_free<br />wolfSSL Entering GetAlgoId<br />wolfSSL Entering DecodeCertExtensions<br />wolfSSL Entering DecodeKeyUsage<br />wolfSSL Entering DecodeExtKeyUsage<br />wolfSSL Entering DecodeBasicCaConstraint<br />wolfSSL Entering DecodeSubjKeyId<br />wolfSSL Entering DecodeAuthKeyId<br />wolfSSL Entering DecodeAuthInfo<br />wolfSSL Entering DecodeAltNames<br />Certificate Policy extension not supported.<br />No CA signer to verify with<br />Failed to verify Peer&#039;s cert<br />&nbsp; &nbsp; &nbsp; &nbsp; Callback override available, will continue<br />wolfSSL Entering wolfSSL_X509_set_issuer_name<br />wolfSSL Entering wolfSSL_X509_NAME_copy<br />wolfSSL Entering wolfSSL_X509_set_subject_name<br />wolfSSL Entering wolfSSL_X509_NAME_copy<br />wolfSSL Entering wolfSSL_X509_STORE_CTX_new_ex<br />wolfSSL Entering wolfSSL_X509_STORE_CTX_init<br />wolfSSL Entering wolfSSL_X509_set_issuer_name<br />wolfSSL Entering wolfSSL_X509_NAME_copy<br />wolfSSL Entering wolfSSL_X509_set_subject_name<br />wolfSSL Entering wolfSSL_X509_NAME_copy<br />Unable to copy to ssl-&gt;peerCert<br />wolfSSL Entering wolfSSL_ERR_error_string<br />In verification callback, error = -188, certificate verify failed<br />wolfSSL Entering wolfSSL_X509_get_issuer_name<br />wolfSSL Entering wolfSSL_X509_NAME_oneline<br />Using static memory -- please pass in a buffer<br />wolfSSL Entering wolfSSL_X509_get_subject_name<br />wolfSSL Entering wolfSSL_X509_NAME_oneline<br />Using static memory -- please pass in a buffer<br />&nbsp; &nbsp; &nbsp; &nbsp; Peer&#039;s cert info:<br /> issuer : [none]<br /> subject: [none]<br />&nbsp; &nbsp; &nbsp; &nbsp; Subject&#039;s domain name at 0 is xxxxxxx</p><br /><br /><br /><p>Please, what am I doing wrong?<br />From ethernet traffic, I see that I send Client Hello, after that I receive Server Hello, Certificate, Certificate Requesr, Server Hello Done, but I reply with Unknown CA.<br />Thank you</p><p>Isabella</p>]]></description>
			<author><![CDATA[null@example.com (isabella)]]></author>
			<pubDate>Mon, 04 Nov 2024 10:06:59 +0000</pubDate>
			<guid>https://www.wolfssl.com/forums/post8016.html#p8016</guid>
		</item>
	</channel>
</rss>
