warmcat / libwebsockets

canonical libwebsockets.org networking library

Home Page:https://libwebsockets.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Tls handshake fails if client_ssl_private_key_filepath varaibale from lws_context_creation_info struct is set to NULL

sush126 opened this issue · comments

Hi @lws-team
i am using secure connection , on client side i am using CA (client_ssl_ca_filepath)and its opertional certficates (client_ssl_cert_filepath) while doing handshake i am not able to get Certificate verify finished packet from client to server.

If i give client_ssl_private_key_filepath then i am able to see Certificate verify finished packet. so my question is in one way handshake do we really required to give client_ssl_private_key_filepath .
i am using below options
pCreatInfo->options = LWS_SERVER_OPTION_EXPLICIT_VHOSTS |
LWS_SERVER_OPTION_DO_SSL_GLOBAL_INIT |
LWS_SERVER_OPTION_REQUIRE_VALID_OPENSSL_CLIENT_CERT |
LWS_SERVER_OPTION_SSL_ECDH;

Attached wireshark logs:
image