Skip Menu |
 
rt.cpan.org will be shut down on March 1st, 2021.

This queue is for tickets about the POE-Component-SSLify CPAN distribution.

Report information
The Basics
Id: 67902
Status: open
Priority: 0/
Queue: POE-Component-SSLify

People
Owner: Nobody in particular
Requestors: ml [...] usermode.de
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: client side verification
Date: Mon, 2 May 2011 20:10:26 +0200
To: bug-poe-component-sslify [...] rt.cpan.org
From: Markus Lauer <ml [...] usermode.de>
Download (untitled) / with headers
text/plain 1.1k
hi! we talked on irc. i try to access a ssl service which requires a special(?) kind of verification. i think it's called "mutual certificate authentication". when using openssl s_client i'll have to use -cert -key and -CAfile to get a successful verified connection. with IO::Socket::SSL use_cert, verfiy_mode are also (additionally) needed. now to sslify: inside PreConnect my $ctx = SSLify_ContextCreate( $key, $cert ); # use_cert my $res = Net::SSLeay::CTX_use_certificate_chain_file($ctx, $ca_cert); DEBUG "Net::SSLeay::CTX_use_certificate_chain_file res: $res"; # -> 1 # verify_mode eval { Net::SSLeay::CTX_set_verify($ctx, Net::SSLeay::VERIFY_PEER) }; die "Net::SSLeay::CTX_set_verify: $@" if $@; my $socket = eval { Client_SSLify($_[ARG0],undef,undef,$ctx) }; all seems to be fine i get a Connected event and then: Client 1 got read error 0 (Normal disconnection) out of nowhere thanks, markus notice: i get a response from my service with Filter::SSL: POE::Filter::SSL->new( client => 1, clientcert=>1, debug => 1, crt => $cert, key => $key, cacrt => $ca_cert ) i can't use it however, because of other issues (buffering, initial ->put)
Download (untitled) / with headers
text/plain 323b
Hi, Show quoted text
> notice: i get a response from my service with Filter::SSL: > POE::Filter::SSL->new( client => 1, clientcert=>1, debug => 1, crt => > $cert, > key => $key, cacrt => $ca_cert ) > > i can't use it however, because of other issues (buffering, initial > ->put)
why can't you use Filter::SSL ? Regards, Markus Mueller


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.