"dreamer2057" wrote:
Are you trying to do server authentication or client authentication?
server authentication, i think. My server should ask (specially generated, private) certificate from roku. Only if it will be sent and passed, the server will allow to view responses.
That sounds like client authentication to me. That is when the server attempts to authenticate the client's credentials, which is what you seem to be describing.
In that case you need to call InitClientCertificates() in your Roku channel (which it looks like you're already doing), AND ensure that the
Roku's Public Key is installed on your server (which you are not doing yet).
Also, you can't supply your own Private Key when using client authentication for a Roku, as you can do with your curl command. Instead, you must use the
Roku's Public Key, and install that on your server. I believe Apache uses the
SSLCACertificateFile directive for this along with
SSLVerifyClient require.
Another thing that might help you is to call event.GetFailureReason() to get a more descriptive reason for the error.