All,
On 12/18/25 6:18 AM, Mark Thomas wrote:
On 18/12/2025 01:28, Rainer Jung wrote:
Am 18.12.25 um 01:26 schrieb Rainer Jung:
<snip/>
I ran those unit tests from TC 9.0.113 and 10.1.50 which are TLS
based with the new tcnative versions 2.0.11 and 1.3.2. They fail in
TestClientCertTls13 for NIO and NIO2 with the following error:
Testcase: testClientCertPost[OpenSSL] took 0.104 sec
Caused an ERROR
Protocol handler initialization failed
<snip/>
I added some debug lines.
- the error "error:12800067:DSO support routines::could not load the
shared library" is shown, because "SSL_ERR_clear();" is missing
somewhere. If I add that in setCipherSuite, the SSL library error
thrown changes to "error:0A0000B9:SSL routines::no cipher match"
We should definitely add the call to SSL_ERR_clear()
I think this indicates that we have some code path where we aren't
checking for, flushing, and reporting errors.
So cleaning errors before making a call to OpenSSL isn't a great plan,
though it does allow us to make progress, here.
I *think* the root cause of this hidden error is elsewhere in the
tcnative code.
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
