certificate verify failed in server

hi,
    I am running a cryptlib ssl client and trying to connect to apache web server.
At the web server i have set in httpd.conf file to ask for client authentication. I have given the corresponding
client certificates' CA path and copied CA certificate file in that directory (ca.pem)

I have set user.p15 for private key to the session at client end. I have activated the session. The handshake fails.....

At server end this is what the error i get.

[Sun Jan 10 17:00:49 2010] [debug] ssl_engine_kernel.c(1190): Certificate Verification: depth: 1, subject:
/C=NZ/O=Dave's Wetaburgers and CA/OU=Certification Division/CN=Dave Himself, issuer: /C=NZ/O=Dave's Wetaburgers and
CA/OU=Certification Division/CN=Dave Himself
[Sun Jan 10 17:00:49 2010] [debug] ssl_engine_kernel.c(1190): Certificate Verification: depth: 0, subject:
/C=NZ/O=Dave's Wetaburgers/OU=Procurement/CN=Dave Smith, issuer: /C=NZ/O=Dave's Wetaburgers and CA/OU=Certification
Division/CN=Dave Himself
[Sun Jan 10 17:00:49 2010] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 read client certificate A
[Sun Jan 10 17:00:49 2010] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 read client key exchange A
[Sun Jan 10 17:00:49 2010] [debug] ssl_engine_kernel.c(1770): OpenSSL: Write: SSLv3 read certificate verify B
[Sun Jan 10 17:00:49 2010] [debug] ssl_engine_kernel.c(1784): OpenSSL: Exit: failed in SSLv3 read certificate verify B
[Sun Jan 10 17:00:49 2010] [info] [client 201.123.80.106] SSL library error 1 in handshake (server www.example.com:443)
[Sun Jan 10 17:00:49 2010] [info] SSL Library Error: 336101535 error:1408809F:SSL routines:SSL3_GET_CERT_VERIFY:length
mismatch
[Sun Jan 10 17:00:49 2010] [info] [client 201.123.80.106] Connection closed to child 2 with abortive shutdown

Any clues...

Regards
Akila


Confidentiality Notice

The information contained in this electronic message and any 
attachments to this message are intended for the exclusive use of
the addressee(s) and may contain confidential or privileged 
information. If you are not the intended recipient, please notify
the sender at Bharat Electronics  or [email protected] immediately
and destroy all copies of this message and any attachments.


_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.