How to get it work at all?
I used this manual. I created a verifier file and started
openssl s_server with a self-signed RSA certificate. Now I can't connect to it.
>gnutls-cli --srpusername user --srppasswd secret 127.0.0.1 -p 4433 --insecure Processed 145 CA certificate(s). Resolving '127.0.0.1'... Connecting to '127.0.0.1:4433'... *** Fatal error: A TLS fatal alert has been received. *** Received alert : Handshake failed No certificates found! *** Handshake has failed GnuTLS error: A TLS fatal alert has been received.
Curl seems not to work too, but win32 binaries doesn't have SRP in
"Features:" output from
openssl s_client stops working as far as I add
-cipher SRP param.
openssl s_server -srpvfile xx.srp -tls1 -cipher SRP -cert ssl.crt -key ssl.key -www
Loading 'screen' into random state - done CONNECTED(00000750) 2672:error:1407745B:SSL routines:SSL23_GET_SERVER_HELLO:reason(1115):.\ssl\s23_c lnt.c:741: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 321 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE ---
I'm using latest versions (OpenSSL 1.0.1e 11 Feb 2013, gnutls-3.0.22-w32, latest curl win32 build).
How should SRP accounts be registered?
Please add a tag for TLS-SRP