[RADIATOR] RADSEC error after upgrade from Radiator 4.3.1 to Radiator 4.4

[Patrick Renkens]

Hi all,

Today I upgraded Radiator from 4.3.1 to 4.4 on a SUN Solaris 5.9 system.
After the upgrade the RADSEC connection over IPv6 did not work properly
any more. See a piece of the logging below.
No changes were made to the config files.
I know that Net_SSLeay.pm is a module that can be a pain in the neck, we
use version 1.30.

I had to revert to 4.3.1 to make things work again (without changing
config files).

Any help is appreciated.

Kind regards,
Patrick Renkens
  Centre for Information Services (UCI)
  Radboud University Nijmegen, Netherlands





Wed Sep  9 14:58:09 2009: DEBUG: Stream attempting tcp connection to #
ipv6:<cut>:2083
Wed Sep  9 14:58:09 2009: DEBUG: Stream connection in progress to #
ipv6:<cut>:2083
Wed Sep  9 14:58:09 2009: DEBUG: Stream connected to # ipv6:<cut>:2083
Wed Sep  9 14:58:09 2009: DEBUG: StreamTLS sessionInit for # ipv6:<cut>
Wed Sep  9 14:58:09 2009: DEBUG: StreamTLS SSL_connect result: -1, 2, 4384
Wed Sep  9 14:58:09 2009: DEBUG: StreamTLS Client Started for #
ipv6:<cut>:2083
Wed Sep  9 14:58:09 2009: DEBUG: Verifying certificate with Subject
'/DC=net/DC=geant/O=<cut> BV/CN=<cut>' presented by peer # ipv6:<cut>
Wed Sep  9 14:58:09 2009: DEBUG: Checking subjectAltName type 2, value <cut>
Wed Sep  9 14:58:09 2009: DEBUG: Checking subjectAltName type 6, value
https://registry.edugain.org/resolver?urn=urn:geant:eduroam:component:idp:Europe:<cut>:<cut>
Wed Sep  9 14:58:09 2009: DEBUG: Checking subjectAltName type 6, value
https://registry.edugain.org/resolver?urn=urn:geant:eduroam:component:sp:Europe:<cut>:<cut>
Wed Sep  9 14:58:09 2009: ERR: Verification of certificate presented by
# ipv6:<cut> failed
Wed Sep  9 14:58:09 2009: DEBUG: StreamTLS SSL_connect result: -1, 1, 4401
Wed Sep  9 14:58:09 2009: ERR: StreamTLS client error: -1, 1, 4401,
27968: 1 - error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Wed Sep  9 14:58:09 2009: DEBUG: Stream disconnected from # ipv6:<cut>:2083