Topic: CAcert.org's CA cert verify failed but with--disable-fastmath it works
Hi There
It seems that wolfssl has problems verifying some (but not all) CA Certs if compiled with --enable-fastmath (wich is default)
For example:
unzip -q wolfssl-2.7.0.zip
cd wolfssl-2.7.0
./configure
make
wget http://www.cacert.org/certs/root.crt
./examples/client/client -h www.cacert.org -p 443 -v 1 -A root.crt
Result:
err = -188, ASN no signer error to confirm failure
yassl error: SSL_connect failed
If configured with
./configure --disable-fastmath
it works.
Result:
SSL version is TLSv1
SSL cipher suite is TLS_RSA_WITH_AES_256_CBC_SHA
Tested on Win7 x64 [AMD K10] with mingGW and Centos6 x64 [INTEL Xeon E31240] with gcc
Could you help?
(btw: Absolut great product... Thank you very much for it)
Greetings
Hans-Jürgen Petrich