• Registered: 2020-11-24
  • Posts: 42

Topic: Self-signed Client Certificate Verification by a Server

When I load a self-signed certificate onto my client, and then attempt to connect to it with a server that is configured with WOLFSSL_VERIFY_PEER passed to wolfSSL_CTX_set_verify(), I always get the error "ASN no signer error to confirm failure".
Is peer verification of a self-signed client not supported?

Share

  • From: Mobile, AL
  • Registered: 2013-12-11
  • Posts: 298

Re: Self-signed Client Certificate Verification by a Server

Hello stroebeljc

You would need to load the same cert on both peers. Else you could setup a verify callback that overrides the error.

Here is an example:
https://github.com/wolfSSL/wolfssl-exam … callback.c

embhorn's Website

Share

  • Registered: 2020-11-24
  • Posts: 42

Re: Self-signed Client Certificate Verification by a Server

Thanks, I used the callback approach, which does the job I need.

Share