-
Notifications
You must be signed in to change notification settings - Fork 102
Open
Description
Hello ,
I am unable to use the engine to establish tls3 communication.
I am running the below commands for server and client respectively.
Version: 5.7
openssl s_server \
-accept 4433 \
-CApath xxxxxxxxxxxxx -build_chain -cert xxxxxxxxxxxx\
-certform DER \
-engine tpm2tss \
-keyform ENGINE \
-key "0xxxxxxxxxxx" \
-cipher ECDHE-ECDSA-AES256-GCM-SHA384 \
-verify 1 \
-debug \
-msg \
-state \
-tls1_3 \
-tlsextdebug \
-trace
openssl s_client \
-connect localhost:4433 \
-CAfile xxxxxxxxxxxxx \
-cipher ECDHE-ECDSA-AES256-GCM-SHA384 \
-debug \
-msg \
-state \
-tls1_3 \
-tlsextdebug \
-trace
I am getting the below error:
0bb0 - ca 3c 2b 81 e0SSL_accept:SSLv3/TLS write finished
SSL_accept:TLSv1.3 early data
SSL3 alert read:fatal:decrypt error
SSL_accept:error in error
ERROR
40D77CB4667F0000:error:0A00041B:SSL routines:ssl3_read_bytes:tlsv1 alert decrypt error:ssl/record/rec_layer_s3.c:907:SSL alert number 51
Attributes of the key:

Usage defined on the certificate:

Metadata
Metadata
Assignees
Labels
No labels