[openssl-users] WG: TLS Error in FreeRadius - eap_tls: ERROR: Failed in __FUNCTION__ (SSL_read): error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed

[Jeffrey Walton]

On Tue, Jan 23, 2018 at 4:33 PM, Salz, Rich <rsalz at akamai.com> wrote:
> On Tue, Jan 23, 2018 at 3:45 PM, Salz, Rich <rsalz at akamai.com> wrote:
>     > ➢     The docs have _not_ changed: https://www.openssl.org/docs/standards.html.
>     >
>     > Nor is there any need for that page to change.  READ WHAT IT SAYS.
>
> ➢     I'm surprised you are arguing against clear documentation on behaviors.
>
> There is no need to be surprised, because I am not doing that.
>
> The webpage says “here’s a casually-maintained list of related standards or other useful information.”  What on that webpage is wrong?
>
> You seem to be very very VERY upset by how OpenSSL implements one particular part of RFC 5280.  Viktor has shown that it’s not just us, it’s other code as well.  The original poster was able to live with OpenSSL’s implementation.  You don’t like that code.  So be it.

If that's your survey of the situation then it is wrong.

No wonder Henson and Marquess left the project. I would get tired of
the games, too.

Jeff