2009-08-27 15:09:21 UTC
Hello all,

I'm using wolfSSL for application i'm building. Atheros embedded board should connect to a PC and exchange information.

My PC runs as server. If I use another PC as client communication is successful. However, when I run the client part from the Atheros board i get FATAL_ERROR (-1) from SSL_connect on the board and SSL_Accept on the server.

I can not use SSL_VERIFY_NONE as the README suggests because i actually use the subject information in my application.

Can point possible problems/solutions. I use wolfSSL 1.0.6 with opensslExtra, without-zlib on Linux (Ubuntu 8.10, i686) and Linux (OpenWRT 8.09, mips).

Thank you very much in advance.

Ivo
#
touskaProject Admin

[Avatar]
2009-08-27 17:33:51 UTC
After you get the -1 from SSL_connect on the board call SSL_get_error(ssl, -1) to see what the actual error in this case is.

Are you using a CA-certificate on the board? How are you loading it?
#
ivovachkov

[Avatar]
2009-08-28 08:20:01 UTC
Thanks Todd.

Following your advice i found out the problem. Apparently after a fresh build and with internet connection the board/linux starts counting time from Epoch ... which makes my certificates invalid. Simple ntpdate fixed the problem.

Moral of the story: Always check what time you 'live' in

Thanks again.