Re: TLS Handshake failure

Hello Peter,

Thank you again for your fast response!
> Hmm, this kinda defeats the point of using a certificate, which is to
verify that the host that you're connecting to is the one that you're
supposed to be connecting to. 
> If you want to disable the checking you can set
CRYPT_SSLOPTION_DISABLE_NAMEVERIFY for the CRYPT_SESSINFO_SSL_OPTIONS
attribute, i.e.
> cryptSetAttribute( cryptSession, CRYPT_SESSINFO_SSL_OPTIONS,
CRYPT_SSLOPTION_DISABLE_NAMEVERIFY );
> but this will then make you vulnerable to MITM attacks.
In this case it does not matter if the certificate is valid or not - I only
want to collect system settings from IP phones for inventory purposes. The
webpage is only accessible via HTTPS and no login in needed...

Regards,
Mathias


_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.