Re: SSL is broken on FreeBSD

On Wed, 2011-04-06 at 01:45 -0400, jhell wrote:
> If you truss the command above before and after creating so said links
> in /usr/local/etc/ssl and in /etc/ssl youll see that there is no
> default
> CAfile or CApath searched for.

Interesting, thanks.  I don't have a FreeBSD box around at present so my
guess was just from starting with s_client.c and reading through to the
Makefile.

> s_client(1)
>    The s_client command implements a generic SSL/TLS client which
>    connects to a remote host using SSL/TLS. It is a very useful
>    diagnostic tool for SSL servers
> [...]
> Maybe there should be an emphasis on ``diagnostic''

Agreed.  From openssl(1): "s_client ... It's intended for testing
purposes only..."

------------------------------------------------------------
This message and any files transmitted within are intended
solely for the addressee or its representative and may
contain company sensitive information.  If you are not the
intended recipient, notify the sender immediately and delete
this message.  Publication, reproduction, forwarding, or 
content disclosure is prohibited without the consent of the
original sender and may be unlawful.

Concurrent Technologies Corporation and its Affiliates.
www.ctc.com  1-800-282-4392
------------------------------------------------------------
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"