<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Hi,<br>
<br>
Ingela Anderton Andin wrote:<br>
<blockquote cite="mid:49114933.5090405@erix.ericsson.se" type="cite">
<blockquote type="cite">
<pre wrap="">But when I try ssl:connect(Gen_tcp_socket,[{verify,0}]), I get
{eoptions,{cacertfile,[]}}.
The Gen_tcp_socket is a socket created using gen_tcp:connect/3.
Since {verify,0}, why is a cacertfile required.
</pre>
</blockquote>
<pre wrap=""><!---->
Verify options was one of the things that was not fully implemented.
Ssl-3.10 will soon be out in R12B-5 and then the new ssl-implementation
will be much more complete but still there are a few limitations left
before it can completely replace the old ssl. You are welcome to try it
and we are of course interested in any feedback that you might have.
</pre>
</blockquote>
<br>
I'm using ssl-3.10 and I still see the same problem:<br>
"cacertfile" is required even if {verify,0} is explicitly specified as
option .<br>
<br>
As example<br>
<br>
ssl:connect("zimbra.erlangsystems.com", 443,
[{verify,0},{ssl_imp,new}]).<br>
{error,{eoptions,{cacertfile,[]}}}<br>
<br>
ssl:connect("zimbra.erlangsystems.com", 443,
[{verify,0}]). <br>
{ok,{sslsocket,5,<0.1664.0>}}<br>
<br>
<br>
Trying to upgrade a tcp socket I put as cacertfile the filename of a
certificate I have on my machine and I've got the following error report<br>
<br>
ssl:connect(#Port<0.3428>,[{certfile,"certs/mycert.pem"},<br>
{keyfile,"certs/mycert.key"},<br>
{cacertfile,"certs/vsign.pem"},<br>
{verify,0}, {ssl_imp, new}])<br>
<br>
=ERROR REPORT==== 4-Dec-2008::17:57:05 ===<br>
SSL: hello: ./ssl_record.erl:291:Fatal error: record_overflow<br>
<br>
<br>
Btw, is it written anywhere in the doc that ssl needs public_key? I
thought crypto was the only required application...<br>
<br>
Kind regards<br>
Francesca<br>
<br>
<pre class="moz-signature" cols="72">--
Francesca Gangemi, <a class="moz-txt-link-abbreviated"
href="mailto:francesca@erlang-consulting.com">francesca@erlang-consulting.com</a>
Erlang Training and Consulting
<a class="moz-txt-link-freetext"
href="http://www.erlang-consulting.com/">http://www.erlang-consulting.com/</a> </pre>
</body>
</html>