我有一个configuration为相互authenticationSSL的负载均衡器。 据我所知,负载均衡器已经configuration了一个Entrust证书,并且已经安装了我们自己的CA作为受信任的根。
客户端,我已经将我们的CA作为受信任的根安装,并将CA的签名证书作为个人证书进行安装。
当我使用Internet Explorer进行连接时,系统会提示您select一个证书,并且客户端证书存在,但是一旦select该页面,该页面将失败。
连接我的Java应用程序,Entrust在我的信任库和客户端.p12在我的密钥库中,我得到了SSL握手失败。
使用OpenSSL我得到以下内容:
openssl s_client -connect xxx.xxx.xxx:443 -state -nbio Loading 'screen' into random state - done CONNECTED(00000134) turning on non blocking io SSL_connect:before/connect initialization SSL_connect:SSLv2/v3 write client hello A SSL_connect:error in SSLv2/v3 read server hello A write R BLOCK SSL_connect:SSLv3 read server hello A depth=1 /C=US/O=Entrust, Inc./OU=www.entrust.net/rpa is incorporated by reference/OU=(c) 2009 Entrust, Inc./CN=Entrust Certification Authority - L1C verify error:num=20:unable to get local issuer certificate verify return:0 SSL_connect:SSLv3 read server certificate A SSL_connect:SSLv3 read server certificate request A SSL_connect:SSLv3 read server done A SSL_connect:SSLv3 write client certificate A SSL_connect:SSLv3 write client key exchange A SSL_connect:SSLv3 write change cipher spec A SSL_connect:SSLv3 write finished A SSL_connect:SSLv3 flush data SSL_connect:error in SSLv3 read finished A SSL_connect:error in SSLv3 read finished A read R BLOCK SSL3 alert read:fatal:handshake failure SSL_connect:failed in SSLv3 read finished A 1688:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:.\ssl\s3_pkt.c:1053:SSL alert number 40 1688:error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure:.\ssl\s3_pkt.c:838:
任何人都可以帮助解决问题所在? 它在客户端或服务器上,并使用哪个证书?