Assertion error with SSL

[Mathias Spoerr]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Hello,

 

I have one ore question regarding SSL:

I always get an assertion error for this line:

      retKey = cryptSetAttribute(cryptSession, CRYPT_SESSINFO_ACTIVE, 1);

 

Whole code:

      // Create the session

      retKey = cryptCreateSession(&cryptSession, CRYPT_UNUSED, CRYPT_SESSION_SSL);

      // Add the server name, user name, and password

      retKey = cryptSetAttributeString(cryptSession, CRYPT_SESSINFO_SERVER_NAME,

            adresse.c_str(), adresse.size());

      retKey = cryptSetAttribute(cryptSession, CRYPT_SESSINFO_SERVER_PORT, httpsPort);       

      // Activate the session

      retKey = cryptSetAttribute(cryptSession, CRYPT_SESSINFO_ACTIVE, 1);

 

Error:

File: .\cert\ext_rd.c

Line: 569

Expression: flag == ATTR_FLAG_NONE

 

Regards,

mspoerr

 

 

_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

[Peter Gutmann]

"Mathias Spoerr" <mathias@...> writes:

>I have one ore question regarding SSL:
>
>I always get an assertion error for this line:
>
>retKey = cryptSetAttribute(cryptSession, CRYPT_SESSINFO_ACTIVE, 1);
>
>File: .\cert\ext_rd.c
>Line: 569
>Expression: flag == ATTR_FLAG_NONE

Which server are you connecting to?

Peter.



_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

[Mathias Spoerr]

> Which server are you connecting to?
It's a Cisco 7921 IP phone. When I ignore the Assert, the connection works
and I get a valid answer for the GET request.

Regards,
Mathias



_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

[Peter Gutmann]

"Mathias Spoerr" <mathias@...> writes:
>> Which server are you connecting to?
>
>It's a Cisco 7921 IP phone. When I ignore the Assert, the connection works
>and I get a valid answer for the GET request.

Is it possible to reach this over the Internet, or can you maybe send me the
cert chain that it provides in the SSL handshake?  You can dump the cert
chain to disk by adding:

  DEBUG_DUMP_CERT( "<filename>", localCertChain );
 
to readSSLCertChain() in session/ssl.c after the importCertFromStream() call
(which would be line 878 in the 3.3.2 code).

Peter.

_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

[Mathias Spoerr]

Hello,

> Is it possible to reach this over the Internet, or can you maybe send
> me the
> cert chain that it provides in the SSL handshake?  You can dump the
> cert
> chain to disk by adding:
>
>   DEBUG_DUMP_CERT( "<filename>", localCertChain );
>
> to readSSLCertChain() in session/ssl.c after the importCertFromStream()
> call
> (which would be line 878 in the 3.3.2 code).

No, it's not reachable via internet, but is it enough when I export the
certificate when connecting via browser? I attached the cert to this email.
If you still need to get the DEBUG_DUMP, I will collect it later.

Regards,
Mathias



_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

[Peter Gutmann]

"Mathias Spoerr" <mathias@...> writes:

>No, it's not reachable via internet, but is it enough when I export the
>certificate when connecting via browser? I attached the cert to this email.
>If you still need to get the DEBUG_DUMP, I will collect it later.

I think I'll need the complete chain, when I feed just that cert to cryptlib
it imports it without any problems.

Peter.

_______________________________________________
Cryptlib mailing list
Cryptlib@... via Mail: cryptlib-request@...
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.