You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@thrift.apache.org by Nitin Kumar <ni...@gmail.com> on 2014/10/17 18:40:58 UTC

TSSL Socket .pem query

Hi All,

I used https://thrift.apache.org/test/keys to create there .pem files
CA.pem, server.pem and client.pem

Now on server side for TSSLServerSocket certfile parameter I am using
server.pem
and on client side for TSSLSocket ca_certs do i need to use client.pem or
CA.pem?

If i use CA.pem it works fine but if I use client.pem I am getting

Could not connect to localhost:xxxx: [Errno 1] _ssl.c:499:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify
failed

Can someone please point me to some document which explains things in
details.


Nitin K