CA certificate issues - X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN

Legacy Open AT
3

Hi,

thanks for your reply.

I’ve implemented the HTTPS client (not the server), so I only need one socket.

I’ve done several tests with OpenSSL. I’ve successfully connected to the server via the following command:

openssl s_client -connect server:port -CAfile CAfile -nameserver server

The parameter “nameserver” activates the SNI extension and includes the server name in the Client-Hello packet. Then, the server knows what certificate it has to send. Please see the WireShark capture at the end of the post.

I’d need an analog way to do this with the wip_ssl library.

Thanks.

f387b799110b7f44f6e3c367a9f915e2c08fd945.jpg470×512 85.1 KB