[openssl-users] WG: TLS Error in FreeRadius - eap_tls: ERROR: Failed in __FUNCTION__ (SSL_read): error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed

[Salz, Rich]

On Tue, Jan 23, 2018 at 3:45 PM, Salz, Rich <rsalz at akamai.com> wrote:
    > ➢     The docs have _not_ changed: https://www.openssl.org/docs/standards.html.
    >
    > Nor is there any need for that page to change.  READ WHAT IT SAYS.
    
➢     I'm surprised you are arguing against clear documentation on behaviors.
    
There is no need to be surprised, because I am not doing that.

The webpage says “here’s a casually-maintained list of related standards or other useful information.”  What on that webpage is wrong?

You seem to be very very VERY upset by how OpenSSL implements one particular part of RFC 5280.  Viktor has shown that it’s not just us, it’s other code as well.  The original poster was able to live with OpenSSL’s implementation.  You don’t like that code.  So be it.