Skip to content

unable to use the engine to establish tls3 communication #295

@shekharpaty

Description

@shekharpaty

Hello ,
I am unable to use the engine to establish tls3 communication.
I am running the below commands for server and client respectively.
Version: 5.7

openssl s_server \
    -accept 4433 \
	-CApath xxxxxxxxxxxxx -build_chain -cert xxxxxxxxxxxx\
	-certform DER \
    -engine tpm2tss \
    -keyform ENGINE \
    -key "0xxxxxxxxxxx" \
    -cipher ECDHE-ECDSA-AES256-GCM-SHA384 \
    -verify 1 \
    -debug \
    -msg \
    -state \
    -tls1_3 \
    -tlsextdebug \
    -trace
openssl s_client \
    -connect localhost:4433 \
    -CAfile xxxxxxxxxxxxx \
    -cipher ECDHE-ECDSA-AES256-GCM-SHA384 \
    -debug \
    -msg \
    -state \
    -tls1_3 \
    -tlsextdebug \
    -trace

I am getting the below error:

0bb0 - ca 3c 2b 81 e0SSL_accept:SSLv3/TLS write finished
SSL_accept:TLSv1.3 early data
SSL3 alert read:fatal:decrypt error
SSL_accept:error in error
ERROR
40D77CB4667F0000:error:0A00041B:SSL routines:ssl3_read_bytes:tlsv1 alert decrypt error:ssl/record/rec_layer_s3.c:907:SSL alert number 51

Attributes of the key:

Image

Usage defined on the certificate:

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions