Re: [Fedora-directory-users] CA certificate format

Yoram Kahana
2007-04-03T19:44:43Z

Hi Richard,

Thanks for your answer, This is my problem, i cant see any mismatch. Do you
know of any other possibilities or ways of debug it?

Thanks in advance
Yoram

On 4/2/07, Richard Megginson <rmeggins@redhat.com>
wrote:
>
> Yoram Kahana wrote:
> > Hi Richard,
> >
> > Indeed it solved one of the problems, I didnt hash the ca certificte
> > in the client side.
> > now i am getting new message
> >
> > TLS: *hostname does not match CN in peer certificate*
> >
> > ** if i understand the meaning the CN and the hostname are not
> > identical but thats not the situation now.
> >
> The CN in the server cert is CN=r1-ows-07.rocaf.org - the server is
> running on r1-ows-07.rocaf.org?
>
> The error message means there is a mismatch somewhere.
> >
> >
> > I have also tried the opensll s_client -debug -connect (the output is
> > enclosed)
> > seems that throgh the openssl it works fine, where am i wrong?
> >
> > Can you see if you have any clue
> > great thanks
> > Yoram
> >
> >
> >
> > On 3/28/07, *Richard Megginson* <rmeggins@redhat.com
> > <mailto:rmeggins@redhat.com>> wrote:
> >
> >     Yoram Kahana wrote:
> >     > Hi
> >     >
> >     > Does anyone has an idea on which format should i save the ca
> >     > certificate in the clients (for SSL communication) ?
> >     > Is it PEM, DER, BER
> >     It depends - what client are you trying to configure?  Did you see
> >     this
> >     -
> >
> http://directory.fedora.redhat.com/wiki/Howto:SSL#Configure_LDAP_clients
> >     >
> >     >
> >     > Thanks in advance
> >     >
> >     > Yoram
> >     >
> >
> ------------------------------------------------------------------------
> >
> >     >
> >     > --
> >     > Fedora-directory-users mailing list
> >     > Fedora-directory-users@redhat.com
> >     <mailto:Fedora-directory-users@redhat.com>
> >     >
https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >     >
> >
> >     --
> >     Fedora-directory-users mailing list
> >     Fedora-directory-users@redhat.com
> >     <mailto:Fedora-directory-users@redhat.com>
> >     https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> >
> >
> >
------------------------------------------------------------------------
> >
> >
> > openssl s_client -debug -connect r1-ows-07:636
> > CONNECTED(00000003)
> > write to 00675450 [00675F50] (142 bytes => 142 (0x8E))
> > 0000 - 80 8c 01 03 01 00 63 00-00 00 20 00 00 39 00 00   ......c...
> ..9..
> > 0010 - 38 00 00 35 00 00 16 00-00 13 00 00 0a 07 00 c0
> 8..5............
> > 0020 - 00 00 33 00 00 32 00 00-2f 03 00 80 00 00 66 00
> ..3..2../.....f.
> > 0030 - 00 05 00 00 04 01 00 80-08 00 80 00 00 63 00 00
> .............c..
> > 0040 - 62 00 00 61 00 00 15 00-00 12 00 00 09 06 00 40
> b..a...........@
> > 0050 - 00 00 65 00 00 64 00 00-60 00 00 14 00 00 11 00
> ..e..d..`.......
> > 0060 - 00 08 00 00 06 04 00 80-00 00 03 02 00 80 24 9c
> ..............$.
> > 0070 - 49 e8 7b b6 bf 6a 36 4a-4a f8 04 25 d9 b8 a7 8e
> I.{..j6JJ..%....
> > 0080 - 57 d7 67 c2 3a 6d 72 d0-d9 37 3f f5 ac 07
W.g.:mr..7?...
> > read from 00675450 [0067B4B0] (7 bytes => 7 (0x7))
> > 0000 - 16 03 01 08 23 02                                 ....#.
> > 0007 - <SPACES/NULS>
> > read from 00675450 [0067B4B7] (2081 bytes => 1441 (0x5A1))
> > 0000 - 00 46 03 01 00 28 82 f7-c8 e3 77 83 de 5f 86 53
> .F...(....w.._.S
> > 0010 - 5d 5a 76 33 04 fe bd a6-b8 02 ee 88 c4 bd e8 6c
> ]Zv3...........l
> > 0020 - 18 b9 ee f6 20 22 92 d7-0e b4 ae aa df c2 83 b7   ....
> "..........
> > 0030 - 07 22 94 af 91 d8 2a 92-da 0c d6 3e d5 7a ee 8f
> ."....*....>.z..
> > 0040 - 7f 26 28 3a 56 00 35 00-0b 00 06 dd 00 06 da 00
.&(:V.5........
> .
> > 0050 - 03 6e 30 82 03 6a 30 82-02 d3 a0 03 02 01 02 02
> .n0..j0.........
> > 0060 - 01 01 30 0d 06 09 2a 86-48 86 f7 0d 01 01 04 05
> ..0...*.H.......
> > 0070 - 00 30 81 83 31 0b 30 09-06 03 55 04 06 13 02 49
> .0..1.0...U....I
> > 0080 - 4c 31 0f 30 0d 06 03 55-04 08 13 06 49 73 72 61
> L1.0...U....Isra
> > 0090 - 65 6c 31 10 30 0e 06 03-55 04 07 13 07 54 65 6c
> el1.0...U....Tel
> > 00a0 - 41 76 69 76 31 11 30 0f-06 03 55 04 0a 13 08 4e
> Aviv1.0...U....N
> > 00b0 - 65 73 73 20 4c 74 64 31-0e 30 0c 06 03 55 04 0b   ess
Ltd1.0...U.
> .
> > 00c0 - 13 05 4c 4d 41 44 53 31-0e 30 0c 06 03 55 04 03
> ..LMADS1.0...U..
> > 00d0 - 13 05 59 6f 72 61 6d 31-1e 30 1c 06 09 2a 86 48
> ..Yoram1.0...*.H
> > 00e0 - 86 f7 0d 01 09 01 16 0f-79 6f 72 61 6d 40 62 61
> ........yoram@ba
> > 00f0 - 6d 61 6d 2e 63 6f 6d 30-1e 17 0d 30 37 30 33 32
> mam.com0...07032
> > 0100 - 39 31 33 35 31 35 35 5a-17 0d 30 38 30 33 32 38
> 9135155Z..080328
> > 0110 - 31 33 35 31 35 35 5a 30-5f 31 0b 30 09 06 03 55
> 135155Z0_1.0...U
> > 0120 - 04 06 13 02 49 4c 31 0f-30 0d 06 03 55 04 08 13
> ....IL1.0...U...
> > 0130 - 06 49 73 72 61 65 6c 31-11 30 0f 06 03 55 04 0a
> .Israel1.0...U..
> > 0140 - 13 08 4e 65 73 73 20 4c-74 64 31 0e 30 0c 06 03   ..Ness
Ltd1.0..
> .
> > 0150 - 55 04 0b 13 05 4c 4d 41-44 53 31 1c 30 1a 06 03
> U....LMADS1.0...
> > 0160 - 55 04 03 13 13 72 31 2d-6f 77 73 2d 30 37 2e 72   U....r1-
> ows-07.r
> > 0170 - 6f 63 61 66 2e 6f 72 67-30 81 9f 30 0d 06 09 2a
> ocaf.org0..0...*
> > 0180 - 86 48 86 f7 0d 01 01 01-05 00 03 81 8d 00 30 81
> .H............0.
> > 0190 - 89 02 81 81 00 c5 12 31-28 e2 de c6 4a 3d 59 7e
> .......1(...J=Y~
> > 01a0 - d8 f2 c4 5e ca 00 6a 08-52 c1 58 ce 3a 38 dc 58   ...^..j.R.X.:
> 8.X
> > 01b0 - 7d 0b c9 83 5d 9e 77 bc-09 9f c4 6e 5a 54 19 ff
> }...].w....nZT..
> > 01c0 - 7b 3f 14 6b 40 51 ed 42-ba 34 d8 89 49 07 21 2b   {?.k@
> Q.B.4..I.!+
> > 01d0 - 89 4f bf 9c 5c 15 1b 61-03 1f 2f 95 b3 23 1b 6f
> .O..\..a../..#.o
> > 01e0 - c2 a9 a2 21 17 ab 62 10-ef 27 27 ae d8 46 84 4b
> ...!..b..''''..F.K
> > 01f0 - 86 b6 f2 8d b1 3e 45 0d-16 1a 8e 99 90 6d a4 5e
> .....>E......m.^
> > 0200 - 6e 9a f6 f2 b5 d0 fb cb-c2 ec f0 a3 7a 5b 20 59
n...........z[
> Y
> > 0210 - 02 00 13 80 0f 02 03 01-00 01 a3 82 01 0f 30 82
> ..............0.
> > 0220 - 01 0b 30 09 06 03 55 1d-13 04 02 30 00 30 2c 06
> ..0...U....0.0,.
> > 0230 - 09 60 86 48 01 86 f8 42-01 0d 04 1f 16 1d 4f 70
> .`.H...B......Op
> > 0240 - 65 6e 53 53 4c 20 47 65-6e 65 72 61 74 65 64 20   enSSL
Generated
> > 0250 - 43 65 72 74 69 66 69 63-61 74 65 30 1d 06 03 55
> Certificate0...U
> > 0260 - 1d 0e 04 16 04 14 f8 72-da cb af d2 d8 e1 18 17
> .......r........
> > 0270 - ec 9e 80 10 89 d1 13 07-a6 e3 30 81 b0 06 03 55
> ..........0....U
> > 0280 - 1d 23 04 81 a8 30 81 a5-80 14 26 9a 3c 03 60 32
> .#...0....&.<.`2
> > 0290 - a4 25 36 ce 56 ae 33 a1-30 45 e2 85 27 a2 a1 81
> .%6.V.3.0E..''...
> > 02a0 - 89 a4 81 86 30 81 83 31-0b 30 09 06 03 55 04 06
> ....0..1.0...U..
> > 02b0 - 13 02 49 4c 31 0f 30 0d-06 03 55 04 08 13 06 49
> ..IL1.0...U....I
> > 02c0 - 73 72 61 65 6c 31 10 30-0e 06 03 55 04 07 13 07
srael1.0...U...
> .
> > 02d0 - 54 65 6c 41 76 69 76 31-11 30 0f 06 03 55 04 0a
TelAviv1.0...U.
> .
> > 02e0 - 13 08 4e 65 73 73 20 4c-74 64 31 0e 30 0c 06 03   ..Ness
Ltd1.0..
> .
> > 02f0 - 55 04 0b 13 05 4c 4d 41-44 53 31 0e 30 0c 06 03
> U....LMADS1.0...
> > 0300 - 55 04 03 13 05 59 6f 72-61 6d 31 1e 30 1c 06 09
> U....Yoram1.0...
> > 0310 - 2a 86 48 86 f7 0d 01 09-01 16 0f 79 6f 72 61 6d
> *.H........yoram
> > 0320 - 40 62 61 6d 61 6d 2e 63-6f 6d 82 01 00 30 0d 06
@bamam.com...0.
> .
> > 0330 - 09 2a 86 48 86 f7 0d 01-01 04 05 00 03 81 81 00
> .*.H............
> > 0340 - 88 38 ad c8 e4 df c9 85-68 2f e6 8b d0 1f 37 fd
> .8......h/....7.
> > 0350 - c4 7d 0c ca 01 5f 58 fb-3d 00 d4 f0 d0 f3 fe bb
> .}..._X.=.......
> > 0360 - e5 7f e2 44 6f 8c 43 7a-9f cc d6 6b 85 40 9c 04
> ...Do.Cz...k.@..
> > 0370 - 22 20 28 32 bf f9 d9 a5-85 e3 62 7a fb e7 2c 54   "
> (2......bz..,T
> > 0380 - 7a 45 bc b8 a9 4e ce 9e-9d 87 37 d0 06 4b 06 c7
> zE...N....7..K..
> > 0390 - 51 d4 27 c9 77 f7 e7 c2-2d ac 3d bb 4e 43 df 69
> Q.''.w...-.=.NC.i
> > 03a0 - b8 54 8c 80 4e 86 d7 a0-86 3a c2 a3 7d 15 ab 31
> .T..N....:..}..1
> > 03b0 - 3f 19 6a d7 09 bb 89 5b-ce 30 83 33 4c 7a bc 5c
> ?.j....[.0.3Lz.\
> > 03c0 - 00 03 66 30 82 03 62 30-82 02 cb a0 03 02 01 02
> ..f0..b0........
> > 03d0 - 02 01 00 30 0d 06 09 2a-86 48 86 f7 0d 01 01 04
> ...0...*.H......
> > 03e0 - 05 00 30 81 83 31 0b 30-09 06 03 55 04 06 13 02
> ..0..1.0...U....
> > 03f0 - 49 4c 31 0f 30 0d 06 03-55 04 08 13 06 49 73 72
> IL1.0...U....Isr
> > 0400 - 61 65 6c 31 10 30 0e 06-03 55 04 07 13 07 54 65
> ael1.0...U....Te
> > 0410 - 6c 41 76 69 76 31 11 30-0f 06 03 55 04 0a 13 08
lAviv1.0...U...
> .
> > 0420 - 4e 65 73 73 20 4c 74 64-31 0e 30 0c 06 03 55 04   Ness
Ltd1.0...U
> .
> > 0430 - 0b 13 05 4c 4d 41 44 53-31 0e 30 0c 06 03 55 04
> ...LMADS1.0...U.
> > 0440 - 03 13 05 59 6f 72 61 6d-31 1e 30 1c 06 09 2a 86
> ...Yoram1.0...*.
> > 0450 - 48 86 f7 0d 01 09 01 16-0f 79 6f 72 61 6d 40 62
> H........yoram@b
> > 0460 - 61 6d 61 6d 2e 63 6f 6d-30 1e 17 0d 30 37 30 33
> amam.com0...0703
> > 0470 - 32 39 31 33 35 31 33 34-5a 17 0d 30 38 30 33 32
> 29135134Z..08032
> > 0480 - 38 31 33 35 31 33 34 5a-30 81 83 31 0b 30 09 06
> 8135134Z0..1.0..
> > 0490 - 03 55 04 06 13 02 49 4c-31 0f 30 0d 06 03 55 04
> .U....IL1.0...U.
> > 04a0 - 08 13 06 49 73 72 61 65-6c 31 10 30 0e 06 03 55
> ...Israel1.0...U
> > 04b0 - 04 07 13 07 54 65 6c 41-76 69 76 31 11 30 0f 06
> ....TelAviv1.0..
> > 04c0 - 03 55 04 0a 13 08 4e 65-73 73 20 4c 74 64 31 0e   .U....Ness
> Ltd1.
> > 04d0 - 30 0c 06 03 55 04 0b 13-05 4c 4d 41 44 53 31 0e
> 0...U....LMADS1.
> > 04e0 - 30 0c 06 03 55 04 03 13-05 59 6f 72 61 6d 31 1e
> 0...U....Yoram1.
> > 04f0 - 30 1c 06 09 2a 86 48 86-f7 0d 01 09 01 16 0f 79
> 0...*.H........y
> > 0500 - 6f 72 61 6d 40 62 61 6d-61 6d 2e 63 6f 6d 30 81
oram@bamam.com0
> .
> > 0510 - 9f 30 0d 06 09 2a 86 48-86 f7 0d 01 01 01 05 00
> .0...*.H........
> > 0520 - 03 81 8d 00 30 81 89 02-81 81 00 a1 9c f4 b7 8b
> ....0...........
> > 0530 - 80 35 c5 b7 60 73 da bb-01 7d 33 36 74 1f 67 5d
> .5..`s...}36t.g]
> > 0540 - eb ff b5 ca 79 1a 1b 3a-9d ce da 62 4c c8 19 0b
> ....y..:...bL...
> > 0550 - 80 e0 7c 4a 4f bb 8f 59-05 b7 a8 c2 ae 5b fe 7c
> ..|JO..Y.....[.|
> > 0560 - 74 91 e5 cf d3 54 3b 4e-88 24 50 84 24 b2 16 d8
> t....T;N.$P.$...
> > 0570 - 9c 1d bd 8c 31 8b d7 28-df 06 24 a8 e1 76 b7 72
> ....1..(..$..v.r
> > 0580 - ee 37 75 e2 89 84 b7 ed-51 76 2c b3 1a eb 6c 5c
> .7u.....Qv,...l\
> > 0590 - 64 87 7d 3a 12 39 4b c0-23 fa a8 63 0e a0 77 c8
> d.}:.9K.#..c..w.
> > 05a0 - 4d                                                M
> > read from 00675450 [0067BA58] (640 bytes => 640 (0x280))
> > 0000 - 9c b7 59 cc 06 a3 ad 79-6c 53 02 03 01 00 01 a3
> ..Y....ylS......
> > 0010 - 81 e3 30 81 e0 30 1d 06-03 55 1d 0e 04 16 04 14
> ..0..0...U......
> > 0020 - 26 9a 3c 03 60 32 a4 25-36 ce 56 ae 33 a1 30 45
> &.<.`2.%6.V.3.0E
> > 0030 - e2 85 27 a2 30 81 b0 06-03 55 1d 23 04 81 a8 30
> ..''.0....U.#...0
> > 0040 - 81 a5 80 14 26 9a 3c 03-60 32 a4 25 36 ce 56 ae
> ....&.<.`2.%6.V.
> > 0050 - 33 a1 30 45 e2 85 27 a2-a1 81 89 a4 81 86 30 81
3.0E..''.......0
> .
> > 0060 - 83 31 0b 30 09 06 03 55-04 06 13 02 49 4c 31 0f
> .1.0...U....IL1.
> > 0070 - 30 0d 06 03 55 04 08 13-06 49 73 72 61 65 6c 31
> 0...U....Israel1
> > 0080 - 10 30 0e 06 03 55 04 07-13 07 54 65 6c 41 76 69
> .0...U....TelAvi
> > 0090 - 76 31 11 30 0f 06 03 55-04 0a 13 08 4e 65 73 73
> v1.0...U....Ness
> > 00a0 - 20 4c 74 64 31 0e 30 0c-06 03 55 04 0b 13 05 4c
> Ltd1.0...U....L
> > 00b0 - 4d 41 44 53 31 0e 30 0c-06 03 55 04 03 13 05 59
> MADS1.0...U....Y
> > 00c0 - 6f 72 61 6d 31 1e 30 1c-06 09 2a 86 48 86 f7 0d
oram1.0...*.H..
> .
> > 00d0 - 01 09 01 16 0f 79 6f 72-61 6d 40 62 61 6d 61 6d
> .....yoram@bamam
> > 00e0 - 2e 63 6f 6d 82 01 00 30-0c 06 03 55 1d 13 04 05
> .com...0...U....
> > 00f0 - 30 03 01 01 ff 30 0d 06-09 2a 86 48 86 f7 0d 01
> 0....0...*.H....
> > 0100 - 01 04 05 00 03 81 81 00-39 46 ea ff b6 f0 6f 69
> ........9F....oi
> > 0110 - e4 69 d5 bd a6 d5 86 be-a5 91 a2 53 46 75 db c6
> .i.........SFu..
> > 0120 - 5f 60 a1 f8 dc b2 54 27-d5 e6 d5 e1 ad d6 08 cd
> _`....T''........
> > 0130 - 42 5a 07 e7 e3 4f 0b 45-23 47 36 98 3e b1 be 09
> BZ...O.E#G6.>...
> > 0140 - 12 fe bc 50 e4 1a 93 6d-4a aa d5 56 f4 40 94 26
> ...P...mJ..V.@.&
> > 0150 - 69 b9 a1 21 3c 04 46 17-84 4b 96 88 1c 20 9b 9a
i..!<.F..K...
> ..
> > 0160 - 5b 6d 33 d6 4d ce 64 1d-15 85 78 3c 2a 1f 33 38   [m3.M.d...x
> <*.38
> > 0170 - 96 39 58 39 88 ba 36 cc-af ce 8c 40 fc 45 5a b1
> .9X9..6....@.EZ.
> > 0180 - 65 ba 8c 15 24 d1 52 b6-0d 00 00 f0 02 01 02 00
> e...$.R.........
> > 0190 - eb 00 61 30 5f 31 0b 30-09 06 03 55 04 06 13 02
> ..a0_1.0...U....
> > 01a0 - 55 53 31 20 30 1e 06 03-55 04 0a 13 17 52 53 41   US1
> 0...U....RSA
> > 01b0 - 20 44 61 74 61 20 53 65-63 75 72 69 74 79 2c 20    Data
Security,
> > 01c0 - 49 6e 63 2e 31 2e 30 2c-06 03 55 04 0b 13 25 53   Inc.1.0
> ,..U...%S
> > 01d0 - 65 63 75 72 65 20 53 65-72 76 65 72 20 43 65 72   ecure Server
> Cer
> > 01e0 - 74 69 66 69 63 61 74 69-6f 6e 20 41 75 74 68 6f   tification
> Autho
> > 01f0 - 72 69 74 79 00 86 30 81-83 31 0b 30 09 06 03 55
> rity..0..1.0...U
> > 0200 - 04 06 13 02 49 4c 31 0f-30 0d 06 03 55 04 08 13
> ....IL1.0...U...
> > 0210 - 06 49 73 72 61 65 6c 31-10 30 0e 06 03 55 04 07
> .Israel1.0...U..
> > 0220 - 13 07 54 65 6c 41 76 69-76 31 11 30 0f 06 03 55
> ..TelAviv1.0...U
> > 0230 - 04 0a 13 08 4e 65 73 73-20 4c 74 64 31 0e 30 0c   ....Ness
Ltd1.0
> .
> > 0240 - 06 03 55 04 0b 13 05 4c-4d 41 44 53 31 0e 30 0c
> ..U....LMADS1.0.
> > 0250 - 06 03 55 04 03 13 05 59-6f 72 61 6d 31 1e 30 1c
> ..U....Yoram1.0.
> > 0260 - 06 09 2a 86 48 86 f7 0d-01 09 01 16 0f 79 6f 72
> ..*.H........yor
> > 0270 - 61 6d 40 62 61 6d 61 6d-2e 63 6f 6d 0e            am@bamam.com.
> > 0280 - <SPACES/NULS>
> > depth=1 /C=IL/ST=Israel/L=TelAviv/O=Ness
> Ltd/OU=LMADS/CN=Yoram/emailAddress=yoram@bamam.com
> > verify error:num=19:self signed certificate in certificate chain
> > verify return:0
> > write to 00675450 [00687150] (12 bytes => 12 (0xC))
> > 0000 - 16 03 01 00 07 0b 00 00-03                        .........
> > 000c - <SPACES/NULS>
> > write to 00675450 [00687150] (139 bytes => 139 (0x8B))
> > 0000 - 16 03 01 00 86 10 00 00-82 00 80 37 d0 c6 7a 6b
> ...........7..zk
> > 0010 - 54 18 16 df d0 6f 90 8f-b1 8a 45 45 7f 15 47 04
> T....o....EE..G.
> > 0020 - 10 ba 23 1a f9 f7 54 50-05 ee 4c e9 79 fe 31 1a
> ..#...TP..L.y.1.
> > 0030 - e2 c1 4a e9 f5 e2 b9 e1-d5 17 e6 e8 28 a9 ee 76
> ..J.........(..v
> > 0040 - b9 ce 5f 59 68 62 a3 8c-07 ee e0 0e 91 b4 df 0d
> .._Yhb..........
> > 0050 - 71 9b ce 38 d2 4b 3d d9-c4 1f e9 74 0e 96 c5 cb
> q..8.K=....t....
> > 0060 - d3 12 57 6c 9a 0c 3b fd-83 3a e4 fd a6 2a ee 8c
> ..Wl..;..:...*..
> > 0070 - e1 67 eb d2 11 3b 6a 03-9c a0 73 38 10 76 89 f0
> .g...;j...s8.v..
> > 0080 - 81 03 dd 91 4d 43 7d 99-f4 a4 b6                  ....MC}....
> > write to 00675450 [00687150] (6 bytes => 6 (0x6))
> > 0000 - 14 03 01 00 01 01                                 ......
> > write to 00675450 [00687150] (53 bytes => 53 (0x35))
> > 0000 - 16 03 01 00 30 09 40 51-48 34 87 0b 53 20 ff 0d   ....0.@QH4..S
> ..
> > 0010 - 2f 7c 96 04 a6 cc 0d bf-4a 76 b1 4e 4d bb fa 39
> /|......Jv.NM..9
> > 0020 - 4b 60 6e 47 3e 87 41 77-9c a2 e3 7b 1b 36 0e 9e
> K`nG>.Aw...{.6..
> > 0030 - c6 4c 74 eb 7a                                    .Lt.z
> > read from 00675450 [0067B4B0] (5 bytes => 5 (0x5))
> > 0000 - 14 03 01 00 01                                    .....
> > read from 00675450 [0067B4B5] (1 bytes => 1 (0x1))
> > 0000 - 01                                                .
> > read from 00675450 [0067B4B0] (5 bytes => 5 (0x5))
> > 0000 - 16 03 01 00 30                                    ....0
> > read from 00675450 [0067B4B5] (48 bytes => 48 (0x30))
> > 0000 - 75 da a7 8d 28 fb 5d c1-b5 04 0a 9e c1 00 d1 19
> u...(.].........
> > 0010 - 9f 74 ff 44 38 4b f3 57-73 e7 f4 0f d1 8b 9c a5
> .t.D8K.Ws.......
> > 0020 - 92 39 22 4d 7e 78 c9 66-ff d4 48 81 8a 15 2b e1
> .9"M~x.f..H...+.
> > ---
> > Certificate chain
> >  0 s:/C=IL/ST=Israel/O=Ness Ltd/OU=LMADS/CN=r1-ows-07.rocaf.org
> >    i:/C=IL/ST=Israel/L=TelAviv/O=Ness
> Ltd/OU=LMADS/CN=Yoram/emailAddress=yoram@bamam.com
> >  1 s:/C=IL/ST=Israel/L=TelAviv/O=Ness
> Ltd/OU=LMADS/CN=Yoram/emailAddress=yoram@bamam.com
> >    i:/C=IL/ST=Israel/L=TelAviv/O=Ness
> Ltd/OU=LMADS/CN=Yoram/emailAddress=yoram@bamam.com
> > ---
> > Server certificate
> > -----BEGIN CERTIFICATE-----
> > MIIDajCCAtOgAwIBAgIBATANBgkqhkiG9w0BAQQFADCBgzELMAkGA1UEBhMCSUwx
> > DzANBgNVBAgTBklzcmFlbDEQMA4GA1UEBxMHVGVsQXZpdjERMA8GA1UEChMITmVz
> > cyBMdGQxDjAMBgNVBAsTBUxNQURTMQ4wDAYDVQQDEwVZb3JhbTEeMBwGCSqGSIb3
> > DQEJARYPeW9yYW1AYmFtYW0uY29tMB4XDTA3MDMyOTEzNTE1NVoXDTA4MDMyODEz
> > NTE1NVowXzELMAkGA1UEBhMCSUwxDzANBgNVBAgTBklzcmFlbDERMA8GA1UEChMI
> > TmVzcyBMdGQxDjAMBgNVBAsTBUxNQURTMRwwGgYDVQQDExNyMS1vd3MtMDcucm9j
> > YWYub3JnMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFEjEo4t7GSj1Zftjy
> > xF7KAGoIUsFYzjo43Fh9C8mDXZ53vAmfxG5aVBn/ez8Ua0BR7UK6NNiJSQchK4lP
> > v5xcFRthAx8vlbMjG2/CqaIhF6tiEO8nJ67YRoRLhrbyjbE+RQ0WGo6ZkG2kXm6a
> > 9vK10PvLwuzwo3pbIFkCABOADwIDAQABo4IBDzCCAQswCQYDVR0TBAIwADAsBglg
> > hkgBhvhCAQ0EHxYdT3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0O
> > BBYEFPhy2suv0tjhGBfsnoAQidETB6bjMIGwBgNVHSMEgagwgaWAFCaaPANgMqQl
> > Ns5WrjOhMEXihSeioYGJpIGGMIGDMQswCQYDVQQGEwJJTDEPMA0GA1UECBMGSXNy
> > YWVsMRAwDgYDVQQHEwdUZWxBdml2MREwDwYDVQQKEwhOZXNzIEx0ZDEOMAwGA1UE
> > CxMFTE1BRFMxDjAMBgNVBAMTBVlvcmFtMR4wHAYJKoZIhvcNAQkBFg95b3JhbUBi
> > YW1hbS5jb22CAQAwDQYJKoZIhvcNAQEEBQADgYEAiDityOTfyYVoL+aL0B83/cR9
> > DMoBX1j7PQDU8NDz/rvlf+JEb4xDep/M1muFQJwEIiAoMr/52aWF42J6++csVHpF
> > vLipTs6enYc30AZLBsdR1CfJd/fnwi2sPbtOQ99puFSMgE6G16CGOsKjfRWrMT8Z
> > atcJu4lbzjCDM0x6vFw> > -----END CERTIFICATE-----
> > subject=/C=IL/ST=Israel/O=Ness Ltd/OU=LMADS/CN=r1-ows-07.rocaf.org
> > issuer=/C=IL/ST=Israel/L=TelAviv/O=Ness
> Ltd/OU=LMADS/CN=Yoram/emailAddress=yoram@bamam.com
> > ---
> > Acceptable client certificate CA names
> > /C=US/O=RSA Data Security, Inc./OU=Secure Server Certification
Authority
> > /C=IL/ST=Israel/L=TelAviv/O=Ness
Ltd/OU=LMADS/CN=Yoram/emailAddress> yoram@bamam.com
> > ---
> > SSL handshake has read 2147 bytes and written 352 bytes
> > ---
> > New, TLSv1/SSLv3, Cipher is AES256-SHA
> > Server public key is 1024 bit
> > SSL-Session:
> >     Protocol  : TLSv1
> >     Cipher    : AES256-SHA
> >     Session-ID:
> 2292D70EB4AEAADFC283B7072294AF91D82A92DA0CD63ED57AEE8F7F26283A56
> >     Session-ID-ctx:
> >     Master-Key:
>
5D9CC7C076BF70BBAECB1BC1588E666C75EB12956F231AF9B3E2F3F4E164AF7BFEEAC912F7482E286F9C819F199FB3E1
> >     Key-Arg   : None
> >     Krb5 Principal: None
> >     Start Time: 1175181192
> >     Timeout   : 300 (sec)
> >     Verify return code: 19 (self signed certificate in certificate
> chain)
> > ---