apache+mod_ssl probléma
Sziasztok!
A probléma a következő: az ssl felélesztésénél hibát észlel.
A beállítások:
Apache verzió: Apache/1.3.37
Openssl verzió: OpenSSL 0.9.8d
Mod_ssl verzió: mod_ssl/2.8.28
A certifications fájlokat elkészítettem. Az ssl.conf ot is:
# SSL Virtual Hosts
Listen 800
ServerAdmin csillagocska@devall.hu
DocumentRoot /var/www/htdocs/
ServerName www.devall.hu
ScriptAlias /cgi-bin/ /var/www/cgi-bin/
SSLEngine on
SSLProtocol all
SSLCipherSuite HIGH:MEDIUM
SSLCertificateFile /etc/apache/ssl.crt/server.crt
SSLCertificateKeyFile /etc/apache/ssl.csr/server.pem
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
CustomLog /var/log/apache/var/ssl/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
A httpd.conf includoltam az ssl.conf ot. Az ssl portot a 800 os szeretném üzemeltetni.
Az ssl_engine_log egy részlete:
[29/Jan/2007 22:11:16 15254] [info] Server: Apache/1.3.37, Interface: mod_ssl/2.8.28, Library: OpenSSL/0.9.8b
[29/Jan/2007 22:11:16 15254] [info] Init: 1st startup round (still not detached)
[29/Jan/2007 22:11:16 15254] [info] Init: Initializing OpenSSL library
[29/Jan/2007 22:11:16 15254] [info] Init: Seeding PRNG with 136 bytes of entropy
[29/Jan/2007 22:11:16 15254] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[29/Jan/2007 22:11:16 15254] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[29/Jan/2007 22:11:17 17410] [info] Init: 2nd startup round (already detached)
[29/Jan/2007 22:11:17 17410] [info] Init: Reinitializing OpenSSL library
[29/Jan/2007 22:11:17 17410] [info] Init: Seeding PRNG with 136 bytes of entropy
[29/Jan/2007 22:11:17 17410] [info] Init: Configuring temporary RSA private keys (512/1024 bits)
[29/Jan/2007 22:11:17 17410] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[29/Jan/2007 22:11:17 17410] [info] Init: Initializing (virtual) servers for SSL
[29/Jan/2007 22:11:17 17410] [warn] Init: (www.devall.hu:443) You configured HTTP(80) on the standard HTTPS(443) port!
[29/Jan/2007 22:27:36 17410] [info] Init: 1st restart round (already detached)
[29/Jan/2007 22:27:36 17410] [info] Init: Reinitializing OpenSSL library
[29/Jan/2007 22:27:36 17410] [info] Init: Seeding PRNG with 1160 bytes of entropy
[29/Jan/2007 22:27:36 17410] [info] Init: Configuring temporary RSA private keys (512/1024 bits)
[29/Jan/2007 22:27:36 17410] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[29/Jan/2007 22:27:36 17410] [info] Init: Initializing (virtual) servers for SSL
[29/Jan/2007 22:27:36 17410] [warn] Init: (www.devall.hu:443) You configured HTTP(80) on the standard HTTPS(443) port!
[29/Jan/2007 22:54:20 17410] [info] Init: 2nd restart round (already detached)
[29/Jan/2007 22:54:20 17410] [info] Init: Reinitializing OpenSSL library
[29/Jan/2007 22:54:20 17410] [info] Init: Seeding PRNG with 1160 bytes of entropy
[29/Jan/2007 22:54:20 17410] [info] Init: Configuring temporary RSA private keys (512/1024 bits)
[29/Jan/2007 22:54:20 17410] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[29/Jan/2007 22:54:20 17410] [info] Init: Initializing (virtual) servers for SSL
[29/Jan/2007 22:54:20 17410] [warn] Init: (www.devall.hu:443) You configured HTTP(80) on the standard HTTPS(443) port!
Valószínű az erdetileg 443 as porton keresné de neekma 800 porton kéne működnie, ami szintén nyitott.
root@irc:~# openssl s_client -connect localhost:800 -state -debug
CONNECTED(00000003)
SSL_connect:before/connect initialization
write to 0x80c7ba8 [0x80c8b20] (118 bytes => 118 (0x76))
0000 - 80 74 01 03 01 00 4b 00-00 00 20 00 00 39 00 00 .t....K... ..9..
0010 - 38 00 00 35 00 00 16 00-00 13 00 00 0a 07 00 c0 8..5............
0020 - 00 00 33 00 00 32 00 00-2f 03 00 80 00 00 05 00 ..3..2../.......
0030 - 00 04 01 00 80 00 00 15-00 00 12 00 00 09 06 00 ................
0040 - 40 00 00 14 00 00 11 00-00 08 00 00 06 04 00 80 @...............
0050 - 00 00 03 02 00 80 12 25-aa ef c5 54 4e 12 8e 3b .......%...TN..;
0060 - 67 46 f5 13 a9 d0 07 d5-63 6c d2 0e d9 e3 b1 8f gF......cl......
0070 - 54 1d 92 6c d3 13 T..l..
SSL_connect:SSLv2/v3 write client hello A
read from 0x80c7ba8 [0x80ce080] (7 bytes => 7 (0x7))
0000 - 3c 21 44 4f 43 54 59
SSL_connect:error in SSLv2/v3 read server hello A
19341:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:567:
root@irc:~#
A gond az, hogy a https servert a böngésző kívülről sem éri el. ([ teszt.devall.hu egy hibas vagy varatlan uzenetet kuldott hibakod
-12263)
Ezt a problémát hogy tudnám kiküszöbölni?
A segítséget előre is köszi.
- Tovább (apache+mod_ssl probléma)
- 1312 megtekintés