Questions / SSL_accept errors (soliciting client certificates)

Viktor Dukhovni openssl-users at dukhovni.org
Fri Apr 19 03:35:09 UTC 2024


On Thu, Apr 18, 2024 at 08:28:13PM -0700, Doug Hardie wrote:

> Really off the wall idea - is it possible that the client is trying to establish a QUIC session?

Random guesses not grounded in evidence are rarely helpful, this is one
such instance.  QUIC is over UDP, your server accepts TCP connections.
And certificate matching is basically the same in QUIC as in TLS.

Best to focus on resolving the incoming TLS alerts from clients that
purport problems with validating the server's certificate chain.

-- 
    Viktor.


More information about the openssl-users mailing list