sslv3 alert certificate unknown in SSL_accept() -> fail

Sun May 21 13:24:30 EDT 2017

On 21.05.2017 17:01, Henrique de Moraes Holschuh wrote:
> On Sun, 21 May 2017, Anton via Info-cyrus wrote:
>> Problem looks like java app cannot validate new cert. Check ssl_store
>> for your java based mail gate. Are there CA and Intermediate SSL
>> Certificates for your new 256ssl cert in mail gate ssl store?
> Some java versions can take https stapling *really* seriously.
>
> You could check if the OCSP URL, and any other URLs inside the
> certificate itself are all https...
these URLs mustn't be https, as these is a never ending certificate 
validating story ...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3491 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20170521/500469a9/attachment.p7s>