-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 23/12/11 12:08, Reinaldo Orrego wrote: > Estimados, > > Estoy instalando un servidor web con ssl. > > Resumiendo y al grano. > > Use la conf por defecto de apache (default-ssl) para crear la > maquina. Y no esta funcionando. > > > # openssl s_client -servername localhost -connect localhost:443 > -state -debug CONNECTED(00000003) SSL_connect:before/connect > initialization write to 0x8459878 [0x845a8e0] (113 bytes => 113 > (0x71)) 0000 - 16 03 01 00 6c 01 00 00-68 03 01 4e f4 8c d2 ab > ....l...h..N.... 0010 - ef 6e 26 06 c7 24 b3 e4-f4 30 88 5d 79 4d > f0 df .n&..$...0.]yM.. 0020 - d4 ab 6d ed ab 2e fb 09-22 c0 b3 00 > 00 28 00 39 ..m....."....(.9 0030 - 00 38 00 35 00 16 00 13-00 0a > 00 33 00 32 00 2f .8.5.......3.2./ 0040 - 00 05 00 04 00 15 00 > 12-00 09 00 14 00 11 00 08 ................ 0050 - 00 06 00 03 00 > ff 02 01-00 00 16 00 00 00 0e 00 ................ 0060 - 0c 00 00 > 09 6c 6f 63 61-6c 68 6f 73 74 00 23 ....localhost.# 0071 - > <SPACES/NULS> SSL_connect:SSLv2/v3 write client hello A read from > 0x8459878 [0x845fe40] (7 bytes => 7 (0x7)) 0000 - 3c 21 44 4f 43 54 > 59 <!DOCTY SSL_connect:error in > SSLv2/v3 read server hello A 17200:error:140770FC:SSL > routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:607: > > Firefox me da el siguiente mensaje. > > Secure Connection Failed > > An error occurred during a connection to ws.cap.msgg.gov.cl. > > SSL received a record that exceeded the maximum permissible > length. > > (Error code: ssl_error_rx_record_too_long) > > The page you are trying to view can not be shown because the > authenticity of the received data could not be verified. Please > contact the web site owners to inform them of this problem. > Alternatively, use the command found in the help menu to report > this broken site. > > En mi /etc/apache2/ports.conf tengo esto > > > NameVirtualHost *:80 Listen 80 > > <IfModule mod_ssl.c> # If you add NameVirtualHost *:443 here, you > will also have to change # the VirtualHost statement in > /etc/apache2/sites-available/default-ssl # to <VirtualHost *:443> # > Server Name Indication for SSL named virtual hosts is currently > not # supported by MSIE on Windows XP. Listen 443 </IfModule> > > <IfModule mod_gnutls.c> Listen 443 </IfModule> > > Cuando escribo la url:443 me sale un error de not found, en el > browser. > > No tengo muy claro por donde buscar una soluciĆ³n. > > Cordialmente
Rey, Tienes habilitadas las variables ? SSLEngine On SSLCertificateFile /ruta/al/cert/ Adicionalmente, que dicen los logs ssl_* de tu apache ? Saludos, - -- LL -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJO9KGHAAoJEPrcLH/1RnsgrFMIANd5JNDvZQL5INZHIzMcXcTs pKUcSM6fw3w9ltXqi/3c5NOprgVBybtPQwumcI1j8rcPYbzaeAZAL6ZZuzgqRErt U4bNLMsO2ZsEOBT96H2RZraHzSEdEFrCJWZdvlf8RG3CjE1jV8zWTyrasud5ibzX wMXIeA/rtq0R+h6yhFxSxOffeZg48ygMvlmbG2Wubn8NxBRUWYWS0jfjaPaKpBEr baJ7DRN/mNxTk4ttDRwLQg0ekKvcgqFhGA2LXFdfjODyS1lyMts0V0qEtcnnW8sQ XhqzJN25VUwJj7hAlHtQOWbyON7O0SJK8c8OsjNCvgf9l6AW/4XoHfcII3jaQdc= =CFwy -----END PGP SIGNATURE-----