Re: ECC SSL client

2009-02-27 Thread David Stutzman
Nelson B Bolyard wrote: tstclnt is able to support protocols in which the client speaks first, and protocols in which the server speaks first. By default, it supports protocols in which the server speaks first. To make it support protocols in which the client speaks first, use the -f command li

Re: ECC SSL client

2009-02-25 Thread Nelson B Bolyard
David Stutzman wrote, On 2009-02-23 08:00: > Using NSS 3.12.2 RTM or NSS 3.11.4 RTM, I get: > org.mozilla.jss.ssl.SSLSocketException: SSL_ForceHandshake failed: > (-12286) Cannot communicate securely with peer: no common encryption > algorithm(s). > Stepping back and eliminating JSS, I get simi

ECC SSL client

2009-02-23 Thread David Stutzman
I'm scratching my head here...I'm trying to connect to an SSL server with a full EC chain using a JSS SSLSocket. Using NSS 3.12.2 libs taken from my Firefox 3.0.6 install I get: org.mozilla.jss.ssl.SSLSocketException: SSL_ForceHandshake failed: (-5978) Network file descriptor is not connected.