I'm running apache 1.3.6, mod_ssl 2.2.8 and openssl 0.9.2b. I have at least
one user with a Netscape 3.04 browser who cannot connect to this server via SSL
("The security library has experienced a database error. You will probably be
unable to connect to the site securely.") It works fine for me with Netscape
4.5 and 4.51. The user can get to the site fine with Internet Explorer 4.0,
but Netscape 3.04 fails consistently.
Here's what the Apache error log has to say about it:
>[Wed Apr 21 01:49:06 1999] [error] mod_ssl: SSL handshake failed (client
>129.105.110.101, server www-gate.it-services.nwu.edu:443) (OpenSSL
>library error follows)
>[Wed Apr 21 01:49:06 1999] [error] OpenSSL: error:14094412:SSL
>routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject
>CN in certificate not server name!?]
At first I thought the problem might that the user was connecting to a
different domain name, but my web browser can connect to the host just fine
with the DNS alias (gatewww.it.nwu.edu). Anyone have any clues? The
certificate name is *definitely* correct, and nobody has changed the host name
AFIK -- anyhow, it works fine for most of our several thousand users. Thanks!
--
Phil Tracy
Northwestern University, Evanston, IL USA
mailto:[EMAIL PROTECTED] http://dopey.at.nwu.edu/tracy/
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
