search

jntass / TASSL-1.1.1k

此仓库已停止维护，请移步https://github.com/jntass/TASSL-1.1.1
Other
54 stars 16 forks source link

unknown gm certificate type #10

Closed johnshajiang closed 2 years ago

johnshajiang commented 2 years ago

启动s_server时报如下错误：

error setting certificate
4527816192:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:756:Expecting: DH PARAMETERS
4527816192:error:140BF139:SSL routines:ssl_set_cert:unknown gm certificate type:ssl/ssl_rsa.c:359:

为什么s_server期望国密证书PEM文件中包含有DH参数？

johnshajiang commented 2 years ago

看起来是由于国密证书中的KeyUsage不合规。