I was getting the same error

Can we have a command that verify the certificate? My certificate is self signed certificate. How can i verify the same?

Dear Smart Monks, Are there anyone who can let me know to check the exact error with SSL validation here? How i can check the same?

C:\Users\Documents\Perl\webapp\bin>plackup --ssl --ssl-key-file=C:\Use
+rs\Documents\Private-Public-key-cert\Private0504.key --ssl-cert-file=
+C:\Users\Documents\Private-Public-key-cert\Cert.crt --ssl_fingerprint
+=B1:51:CE:74:BC:55:0F:F4:FF:17.......... app.psgi
[webapp:35672] core @2021-05-05 00:19:35> Built config from files: C:\
+Users\Documents\Perl\Synchrony-Perl\webapp\config.yml C:\Users\Docume
+nts\Perl\Synchrony-Perl\webapp\environments\development.yml in (eval 
+272) l. 910
failed to listen to port 5000:  at C:/Strawberry/perl/site/lib/HTTP/Se
+rver/PSGI.pm line 103.
[download]

The doc for IO::Socket::SSL suggests setting the environment variable $IO::Socket::SSL::DEBUG to 1, 2 or 3.

Hope this helps!



The way forward always starts with a minimal test.

Hello Team, I have written a small program to verify my self-signed certificate. Please check below command that we are getting error.

use IO::Socket::SSL qw(debug3);
use Net::SSLeay;


# simple server
my $server = IO::Socket::SSL->new(
    # where to listen
    LocalAddr => '127.0.0.1',
    LocalPort => 5000,
    Listen => 10,
 
    # which certificate to offer
    # with SNI support there can be different certificates per hostnam
+e
    #verify_mode => Net::SSLeay->VERIFY_PEER(),
    SSL_cert_file => 'C:/Users/Documents/Private-Public-key-cert/Cert.
+crt',
    SSL_key_file => 'C:/Users/Documents/Private-Public-key-cert/Privat
+e0504.key',
    ca_file => 'C:/Users/Documents/Private-Public-key-cert/cacerts',
) or die "failed to listen: $!";
 
# accept client
my $client = $server->accept or die
    "failed to accept or ssl handshake: $!,$SSL_ERROR";
[download]

Output available

DEBUG: .../IO/Socket/SSL.pm:3010: new ctx 43981520
DEBUG: .../IO/Socket/SSL.pm:1031: no socket yet
[download]

Can you please let me know this is expected?