Sorry, it seems the error reports got mixed up...
My error gives the same result as Mark Stosberg saw in Netscape,
but different entries in the logs... I never get the [error]
entries, just this:
[info] Connection to child 4 established (server starbug.inbox.se:443)
[info] SSL handshake stopped: connection was closed
The log entries I submitted (below) is what happens if I increase the
log level to "trace"
I attached my original post to the end of this mail.
[continued]
> >
> > [25/Mar/1999 13:10:21] [info] Connection to child 0 established (server
>starbug.inbox.se:443)
> > [25/Mar/1999 13:10:21] [trace] Seeding PRNG with 1032 bytes of entropy
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Handshake: start
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Loop: before SSL initialization
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Loop: SSLv3 read client hello A
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Loop: SSLv3 write server hello A
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Loop: SSLv3 write certificate A
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Loop: SSLv3 write key exchange A
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Loop: SSLv3 write server done A
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Loop: SSLv3 flush data
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Read: SSLv3 read client certificate A
> > [25/Mar/1999 13:10:21] [trace] OpenSSL: Exit: failed in SSLv3 read client
>certificate A
> > [25/Mar/1999 13:10:21] [info] SSL handshake stopped: connection was closed
> >
> > Strange... I don't use SSLVerifyClient...
>
> > > > I'm getting the same odd error as the other fellow:
> > > > "Netscape has encountered bad data from the server." (Mac Communicator 4.51)
> > > >
> > > > Here's my setup:
> > > > 3.1-RELEASE FreeBSD
> > > > Apache/1.3.6 (Unix) mod_ssl/2.2.6 OpenSSL/0.9.2b
> > > >
> > > > And the errors from the logs:
> > > > [Thu Mar 25 04:52:37 1999] [error] mod_ssl: SSL handshake failed (client
> > > > 199.120.185.113, server secure.infocom.com:443) (OpenSSL library error follows)
> > > > [Thu Mar 25 04:52:37 1999] [error] OpenSSL: error:14094410:SSL
> > > > routines:SSL3_READ_BYTES:sslv3 alert handshake failure
> > >
> > > At which state of the handshake happens this?
> > > Use "SSLLogLevel trace" to find this out, please.
>
> But where the [error] message in your trace? Seems like you've now a different
> problem. And yes, it's strange that a client certificate is read although
> youßve not configured one. BTW, I use exactly the same software as you
> (FreeBSD 3.1, Apache 1.3.6, mod_ssl 2.2.6, OpenSSL 0.9.2b) and it works fine
I use RedHat Linux 5.2 w/ kernel 2.2.4,
Apache 1.3.6, mod_ssl 2.2.6, OpenSSL 0.9.1c
> with my local Netscape. So it really seems that those Mac-Netscapes send
> something different? Are you sure this Netscape isn't broken? Can
It's not only Mac NS, but also Linux Netscape, and yes, they work fine
with other sites including mod_ssl ones.
> you correctly connect to other SSL sites?
>
> Ralf S. Engelschall
> [EMAIL PROTECTED]
> www.engelschall.com
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.engelschall.com/sw/mod_ssl/
> Official Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
Original post:
--------------
I'm having some strange problems...
When compiling for the mod_ssl-2.2.6-1.3.6 RPMs
I get a server that works with
Win Netscape 4
Win M$IE 4,
but *not* with
Mac Netscape 4.5
Linux Netscape 4.08
(ssl connections that is, normal connections work fine)
I use Redhat 5.2, kernel 2.2.4, openssl 0.9.1c
(yeah, I know, but I did not find .2b RPMs
and was lazy [could the former be the problem?])
Entries in ssl_engine.log:
[info] Connection to child 2 established (server starbug.inbox.se:443)
[info] SSL handshake stopped: connection was closed
Netscape pops up a dialog
"Netscape has encountered bad data from the server."
No errors in httpd error_log
/magnus
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
